The npm package 'kb-first-package' has been identified as containing malicious code. This discovery was reported by Amazon Inspector and cataloged in the GCVE Database. No specific affected versions or technical details such as CVSS scores are provided. There is no indication of known exploits in the wild or available patches.