npm
Malicious svelte-kit-streak @1.0.0
Vulnerability report · Last retrieved from osv.dev August 11, 2026 at 2:21 PM UTC
OSV ID
MAL-2026-13726
Ecosystem
npm
Summary
svelte-kit-streak@1.0.0 was scanned across 8 files with no a static rule matches and no traced behaviors indicating exfiltration, install-time remote code execution, silent-relay, credential distribution, backdoor, or self-propagation. No attacker-controlled network destinations, credential reads, or lifecycle-hook side effects were observed.
Source: amazon-inspector (b52621d72853042287f8152d66c3f465b510af17f7b16283d9ab64ee01dc13cb)
Protect your entire dependency tree
Scan your lock files automatically on every PR. Block malicious packages before they reach production.