npm
Malicious kid-api @99.0.0
Vulnerability report · Last retrieved from osv.dev August 14, 2026 at 1:32 PM UTC
OSV ID
MAL-2026-20
Ecosystem
npm
Summary
The package kid-api was found to contain malicious code.
Source: amazon-inspector (1bc35802113ea5c7ac4e3d956e72af4ce3fbc5a9b3b8fc4c9d610d158d65250a)
Protect your entire dependency tree
Scan your lock files automatically on every PR. Block malicious packages before they reach production.