MAL-2026-20

    Dashboard / Malicious Package / MAL-2026-20

    MAL-2026-20

    Published: 2 Jan 2026Last Modified: 19 Mar 2026

    Summary: Malicious code in kid-api (npm)

    Details: Source: amazon-inspector (1bc35802113ea5c7ac4e3d956e72af4ce3fbc5a9b3b8fc4c9d610d158d65250a) The package kid-api was found to contain malicious code.

    References:

    Affected packages

    Package

    Name: kid-api

    Purl: pkg:npm/kid-api

    Affected ranges

    Type: SEMVER

    Events:

    Introduced- 0
    Fixed -None

    Affected versions

    99.0.0
    MAL-2026-20 | CVE-DB