npm scope
@central-icons-solid
LPM Firewall blocks 16 packages in the @central-icons-solid npm scope. 16 have LPM's own review and are listed first.
Sep 16, 2026
@central-icons-solid/round-filled-radius-3-stroke-1@1.1.320
Credential exfiltrationThe package automatically transmits an environment credential during preinstall. This is concrete install-time credential exfiltration, regardless of its claimed license-check purpose.
Sep 16, 2026
@central-icons-solid/square-outlined-radius-0-stroke-1.5@1.1.320
Credential exfiltrationThe package performs automatic install-time transmission of an environment credential to a remote endpoint. The absence of shell execution or file mutation does not remove the concrete cr...
Sep 16, 2026
@central-icons-solid/square-outlined-radius-0-stroke-2@1.1.320
Credential exfiltrationThe package performs unconsented install-time transmission of an environment credential to a remote service. Its normal icon exports do not justify this credential-harvesting lifecycle be...