registry / @central-icons-qwik/round-outlined-radius-2-stroke-2 / 1.1.291

@central-icons-qwik/round-outlined-radius-2-stroke-2@1.1.291

A collection of round outlined Qwik icons with 2px radius and 2px stroke width, designed for use in Qwik applications.

AI Security Review

scanned 3mo ago · by lpm-firewall-ai

No confirmed malicious attack surface was established. The only install-time behavior is a vendor license check for this commercial icon package.

Static reason

One or more suspicious static signals were detected.

Trigger

npm preinstall runs node ./license-check.js

Impact

May disclose CENTRAL_LICENSE_KEY to centralicons.com during install, but no credential harvesting or broader exfiltration was found.

Mechanism

package-aligned license validation request

AI rationale

The preinstall network behavior is visible and somewhat sensitive, but it is narrowly scoped to validating the package's own Central Icons license and does not mutate files, execute remote code, or harvest unrelated data. Static inspection supports treating scanner findings as package-aligned false positives rather than malware.

Evidence

package.jsonlicense-check.jsindex.mjsIconSecretPhrase/index.mjsIconPassword/index.mjsIconCryptoWallet/index.mjs

Network endpoints1

centralicons.com/license/check

Decision evidence

public snapshot

AI called this Clean at 93.0% confidence with false-positive risk.

@central-icons-qwik/round-outlined-radius-2-stroke-2@1.1.291

AI Security Review

Decision evidence

Source & flagged code

Source & flagged code

Findings

Affected versions and remediation

Source & flagged code