Loading npm security reports…
A collection of round filled Solid icons with 1px radius and 2px stroke width, designed for use in Solid applications.
No attack was identified. The preinstall hook checks the package license with the vendor's license service.
Package defines install-time lifecycle scripts.
package.jsonView on unpkgThe preinstall hook runs the package's license check.
package.jsonView on unpkg · L14Source fingerprint signature matches a known malicious package signature; route for source-aware review.
license-check.jsView on unpkgThe check reads CENTRAL_LICENSE_KEY and sends it as a bearer token to centralicons.com with this package's name and version.
license-check.jsView on unpkg · L1The request is directed to the package vendor's license endpoint; no separate attack behavior was identified in the inspected source.
license-check.jsView on unpkg · L14This report applies to @central-icons-solid/round-filled-radius-1-stroke-2@1.2.5.
See version security history for other recorded verdicts.
Evidence last updated: .
Package defines install-time lifecycle scripts.
package.jsonView on unpkg · L14The preinstall hook runs the package's license check.
package.jsonView on unpkg · L14The check reads CENTRAL_LICENSE_KEY and sends it as a bearer token to centralicons.com with this package's name and version.
license-check.jsView on unpkg · L1The request is directed to the package vendor's license endpoint; no separate attack behavior was identified in the inspected source.
license-check.jsView on unpkg · L14Source fingerprint signature matches a known malicious package signature; route for source-aware review.
license-check.jsView on unpkg