
Research
/Security News
Bitwarden CLI Compromised in Ongoing Checkmarx Supply Chain Campaign
Bitwarden CLI 2026.4.0 was compromised in the Checkmarx supply chain campaign after attackers abused a GitHub Action in Bitwarden’s CI/CD pipeline.
@qrry43/kia-uvo-client
Advanced tools
This library interacts with Kia Uvo, Kia's infotainment and telematics service.
This library interacts with Kia Uvo, Kia's infotainment and telematics service. It allows one to fetch vehicle status, including lock, engine, and battery state and many other details.
Login, refresh vehicle data, then fetch and print the current battery charge level.
const UvoClient = require('@qrry43/kia-uvo-client')
const client = new UvoClient()
client.authenticate({
userId: 'your-user-id',
password: 'your-password'
}).then(({vehicleSummary}) =>
client.refreshVehicleStatus({vehicleKey: vehicleSummary[0].vehicleKey})
).then(({vehicleKey}) =>
client.getVehicleStatus({vehicleKey})
).then(data => {
const chargePct = data.vehicleInfoList[0].lastVehicleInfo.vehicleStatusRpt.vehicleStatus.batteryStatus.stateOfCharge
console.log(`Battery charge: ${chargePct}%`)
})
npm install @qrry43/kia-uvo-client
Create a new client object. There are no parameters.
const client = new UvoClient()
Connect to the service and authenticate with a username and password. Returns a promise which resolves to an object with a list of vehicles. Authentication will time out and needs to be repeated periodically.
Parameters:
Returns a promise which resolves to an object like the following:
{
"vehicleSummary": [
{
"vin": "some-vin",
"vehicleIdentifier": "some-id",
"modelName": "NIRO PHEV",
"modelYear": "2019",
"nickName": "My NIRO PHEV",
"generation": 2,
"extColorCode": "CR5",
"trim": "EX PRE",
"imagePath": { },
"enrollmentStatus": 1,
"fatcAvailable": 0,
"telematicsUnit": 1,
"fuelType": 7,
"colorName": "RUNWAY RED",
"activationType": 1,
"mileage": "12345.6",
"dealerCode": "OR011",
"mobileStore": [],
"supportedApp": { },
"supportAdditionalDriver": 0,
"customerType": 0,
"projectCode": "SOMECODE",
"headUnitDesc": "AVN5.0",
"provStatus": "4",
"enrollmentSuppressionType": 0,
"vehicleKey": "some-vehicle-key"
}
]
}
The most important value is the vehicleKey which is a unique key for the vehicle. This key changes periodically (probably to prevent replay attacks) and is required for all other actions.
Uvo will serve stale data. This method tells Uvo to fetch fresh data. This may take some time to complete and it is likely that there are consequences to calling this too frequently.
Parameters:
Returns a promise which resolves to the parameters passed to it.
This method returns the most recent cached vehicle status. If you need the current status, be sure to call client.refreshVehicleStatus.
Parameters:
Returns a promise which resolves to a very large data structure, similar to the following:
{
"vehicleInfoList": [
{
"vinKey": "some-key",
"vehicleConfig": {
},
"lastVehicleInfo": {
"vehicleNickName": "My Car",
"vehicleStatusRpt": {
"reportDate": {
"utc": "20210722052311",
"offset": -7
},
"vehicleStatus": {
"engine": false,
"doorLock": true,
"lowFuelLight": false,
}
}
}
}
]
}
Copyright (c) 2021 Matt Harrington
FAQs
This library interacts with Kia Uvo, Kia's infotainment and telematics service.
We found that @qrry43/kia-uvo-client demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Research
/Security News
Bitwarden CLI 2026.4.0 was compromised in the Checkmarx supply chain campaign after attackers abused a GitHub Action in Bitwarden’s CI/CD pipeline.

Research
/Security News
Docker and Socket have uncovered malicious Checkmarx KICS images and suspicious code extension releases in a broader supply chain compromise.

Product
Stay on top of alert changes with filtered subscriptions, batched summaries, and notification routing built for triage.