registry / @central-icons-solid/round-filled-radius-2-stroke-1 / 1.2.2

@central-icons-solid/round-filled-radius-2-stroke-1@1.2.2

A collection of round filled Solid icons with 2px radius and 1px stroke width, designed for use in Solid applications.

AI Security Review

scanned 7d ago · by lpm-firewall-ai

No attack was identified. The install hook validates a service-specific license key against a fixed package-aligned endpoint.

Static reason

One or more suspicious static signals were detected.; source fingerprint signature matched known malicious package; routed for review

Trigger

npm preinstall invokes license-check.js.

Impact

License validation occurs during installation, and a missing key stops the hook. No credential harvesting, remote code execution, or filesystem mutation was identified in the inspected hook.

Mechanism

The hook posts the license key as authentication and sends package identity metadata; it parses the response as JSON.

AI rationale

The inspected installation code sends a dedicated license credential to its intended service, with no configurable recipient or executable response handling. The scanner fingerprint does not establish malicious behavior, and the source supports ordinary license validation.

Network endpoints1

centralicons.com/license/check

Decision evidence

public snapshot

AI called this Clean at 96.0% confidence as Benign with low false-positive risk.

Evidence for AI clean decision

package.json runs license-check.js during preinstall.
license-check.js authenticates to the fixed Central Icons license-check endpoint using CENTRAL_LICENSE_KEY.

@central-icons-solid/round-filled-radius-2-stroke-1@1.2.2

AI Security Review

Decision evidence

Source & flagged code

Source & flagged code

Findings

Affected versions and remediation

Source & flagged code