npm scope
@central-icons-svelte
LPM Firewall blocks 14 packages in the @central-icons-svelte npm scope. 14 have LPM's own review and are listed first.
Sep 16, 2026
@central-icons-svelte/round-outlined-radius-0-stroke-1.5@1.1.320
Credential exfiltrationThe automatic lifecycle hook collects and transmits a credential, creating concrete install-time credential-exfiltration behavior. No broader payload, persistence, or filesystem mutation...
Sep 16, 2026
@central-icons-svelte/round-filled-radius-0-stroke-1@1.1.320
Credential exfiltrationThe package performs automatic install-time transmission of an environment credential, while suppressing validation failure. That behavior is a concrete credential-exfiltration risk rathe...
Sep 16, 2026
@central-icons-svelte/round-outlined-radius-2-stroke-2@1.1.320
Credential exfiltrationThe package uses an automatic preinstall hook to require and transmit an environment secret. The source provides no necessary local functionality for this collection, and it suppresses va...