The npm package svelte-streak-kit version 1.0.0 is identified as malicious. Although static analysis and behavior tracing did not detect typical malicious activities such as credential access or remote code execution, the package is considered fully compromising to any system where it is installed. Users are advised to remove the package and rotate all secrets and keys from a different, uncompromised system due to the risk of full system compromise.