The svelte-kit-cache npm package version 1.0.0 is identified as malicious. Although no static or behavioral indicators of a supply-chain attack were observed, the package is considered fully compromising any system it is installed on. Immediate removal of the package and rotation of all secrets and keys stored on the affected system are strongly recommended. Complete remediation may require rebuilding the system due to potential full compromise.