registry / @central-icons-solid/round-filled-radius-3-stroke-1.5 / 1.2.6

@central-icons-solid/round-filled-radius-3-stroke-1.5@1.2.6

A collection of round filled Solid icons with 3px radius and 1.5px stroke width, designed for use in Solid applications.

AI Security Review

scanned 1d ago · by lpm-firewall-ai

No attack was identified. The preinstall hook performs a license check using a key explicitly supplied through the environment.

Static reason

One or more suspicious static signals were detected.; source fingerprint signature matched known malicious package; routed for review

Trigger

Package installation with CENTRAL_LICENSE_KEY set.

Impact

The inspected behavior is vendor license validation; no unrelated credential collection or other attack effect was identified.

Mechanism

The script posts that key to centralicons.com with the package name and version for license validation.

AI rationale

The flagged install hook runs a vendor license check and sends only its explicitly supplied license key to the package vendor's license endpoint. Inspected source did not establish malicious behavior.

Evidence

package.jsonlicense-check.js

Network endpoints1

centralicons.com/license/check

Decision evidence

public snapshot

AI called this Clean at 94.0% confidence as Benign with low false-positive risk.

Evidence for AI clean decision

The preinstall hook runs a package license check.

@central-icons-solid/round-filled-radius-3-stroke-1.5@1.2.6

AI Security Review

Decision evidence

Source & flagged code

Source & flagged code

Findings

Affected versions and remediation

Source & flagged code