Malicious code in box-ui-elements-usm (npm)

The package 'box-ui-elements-usm' at version 99.3.1 in the npm ecosystem has been identified as containing malicious code. There is no further technical detail or description of the nature of the malicious code or its behavior. No patch or remediation information is provided, and no known exploits in the wild have been reported.

The presence of malicious code in the specified package version could lead to compromise of systems using this package, but specific impacts are not detailed in the source data. Without further information, the exact consequences of this malicious code cannot be determined.

Patch status is not yet confirmed — check the vendor advisory or npm security advisories for current remediation guidance. Until then, avoid using version 99.3.1 of 'box-ui-elements-usm' and consider using alternative trusted versions or packages.