The npm package kb-rnd-package has been identified as containing malicious code according to Amazon Inspector source details. No specific versions are listed as affected, and no CVSS score or detailed impact information is provided. There is no indication of known exploits in the wild or available patches.