@ks-openclaw/kim

MAL-2026-11528

npmdependency-confusion8/4/2026
Description

Malicious code in @ks-openclaw/kim (npm)

Indicators of Compromise
SHA256 Hashes (2)
a563317f01b921a7425ae16f740c8fa729db03087afacfea903db3dd90e15803
f592a38ee5b43f5e5e918025c8b47284f72137174ff23cbcc6da80ad1d094376
References (2)
https://www.npmjs.com/package/@ks-openclaw/kim/v/99.0.0OSVhttps://www.npmjs.com/package/@ks-openclaw/kim/v/99.0.1OSV
Details
Ecosystemnpm
Attack Typedependency-confusion
Published8/4/2026
Quick Actions
All Incidentsnpm Incidents
Agentic AI · Pentesting

Ready for Agentic Automated Testing?

Deploy autonomous AI agents that reason, exploit, and validate complex vulnerability chains — not another scanner, an agentic system that thinks like a senior pentester.

Zero false positives
PoC for every finding
30+ tools orchestrated
Book a DemoLearn More
Setup in 5 minutesSOC 2 & ISO 27001