Loading npm security reports…
A collection of round filled Solid icons with 2px radius and 1px stroke width, designed for use in Solid applications.
No attack was identified. The install hook checks the package license by sending the supplied license key to Central Icons.
Package defines install-time lifecycle scripts.
package.jsonView on unpkgThe preinstall hook runs a license check when the package is installed.
package.jsonView on unpkg · L13Source fingerprint signature matches a known malicious package signature; route for source-aware review.
license-check.jsView on unpkgThe check reads CENTRAL_LICENSE_KEY and sends it to centralicons.com with this package’s name and version.
license-check.jsView on unpkg · L1The check reads CENTRAL_LICENSE_KEY and sends it to centralicons.com with this package’s name and version.
license-check.jsView on unpkg · L13The response is used to reject an invalid license; the inspected code shows no unrelated recipient or other attack behavior.
license-check.jsView on unpkg · L33This report applies to @central-icons-solid/round-filled-radius-2-stroke-1@1.2.5.
See version security history for other recorded verdicts.
Evidence last updated: .
Package defines install-time lifecycle scripts.
package.jsonView on unpkg · L14The preinstall hook runs a license check when the package is installed.
package.jsonView on unpkg · L13The check reads CENTRAL_LICENSE_KEY and sends it to centralicons.com with this package’s name and version.
license-check.jsView on unpkg · L1The check reads CENTRAL_LICENSE_KEY and sends it to centralicons.com with this package’s name and version.
license-check.jsView on unpkg · L13The response is used to reject an invalid license; the inspected code shows no unrelated recipient or other attack behavior.
license-check.jsView on unpkg · L33Source fingerprint signature matches a known malicious package signature; route for source-aware review.
license-check.jsView on unpkg