npm scope
@central-icons-qwik
LPM Firewall blocks 13 packages in the @central-icons-qwik npm scope. 13 have LPM's own review and are listed first.
Sep 16, 2026
@central-icons-qwik/round-filled-radius-0-stroke-1.5@1.1.320
Credential exfiltrationAutomatic installation-time transmission of an environment credential is concrete credential-exfiltration behavior. The package contains no evidence that the installer independently conse...
Sep 16, 2026
@central-icons-qwik/round-filled-radius-3-stroke-1@1.1.320
Credential exfiltrationThe package has an automatic preinstall hook that sends an environment credential to a remote host. This is concrete credential exfiltration during installation, despite the absence of ot...
Sep 16, 2026
@central-icons-qwik/round-outlined-radius-0-stroke-1@1.1.320
Credential exfiltrationThe automatic preinstall hook exports an environment credential over the network. The absence of payload execution does not remove the concrete credential-exfiltration surface.