svelte-streak-board (1.0.0) potentially affected by unknown CVE via streak-core-lib (1.0.0)

streak-core-lib NPM version 1.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on streak-core-lib and may be impacted: - svelte-streak-board 1.0.0 Source cves: unknown CVE Source advisory: SNYK:JS-STREAKCORELIB-18503763...

MAL-2026-11148 Malicious code in streak-core-lib (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cf01d1216cca4dbb1b7da58b70a710d7d04bff671d2889f8ca0d7837633dec34 [email protected] presents itself as a 'day-math primitives' library, but index.mjs the package main, executed on any require/import contains an...