registry / AI-agent capability abuse / @central-icons-svelte/round-filled-radius-2-stroke-2 / 1.1.320
@central-icons-svelte/round-filled-radius-2-stroke-2@1.1.320
A collection of round filled Svelte icons with 2px radius and 2px stroke width, designed for use in Svelte applications.
AI Security Review
scanned 2mo ago · by lpm-firewall-aiThe automatic network check is transparent and limited to a dedicated license key, but the package also offers an explicit command to mutate AI-assistant configuration. This is a bounded agent-capability risk rather than evidence of malware.
Static reason
One or more suspicious static signals were detected.; source fingerprint signature matched known malicious package; routed for review
Trigger
npm installation triggers the license check; the user must separately run npx skills add to install the skill.
Impact
The license key is disclosed to the named license endpoint; the explicit command can add the packaged skill to an AI assistant configuration.
Mechanism
License-key validation and explicit AI-assistant skill setup.
AI rationale
The automatic network check is transparent and limited to a dedicated license key, but the package also offers an explicit command to mutate AI-assistant configuration. This is a bounded agent-capability risk rather than evidence of malware.
Evidence
package.jsonlicense-check.jsREADME.mdskills/central-icons-svelte/SKILL.md.claude/skills/central-icons-svelte/
Network endpoints1
centralicons.com/license/check
Decision evidence
public snapshotAI called this Suspicious at 92.0% confidence as Dangerous Capability with medium false-positive risk.
Evidence for warning
- The preinstall hook runs a license checker automatically.
- The checker sends the named license key as a Bearer credential to centralicons.com.
- The README directs an explicit command that can install the bundled AI-assistant skill into detected assistant paths.
Evidence against
- The checker reads only CENTRAL_LICENSE_KEY and sends package and version metadata to a named license endpoint.
- No file writes, shell execution, dynamic code loading, broad environment harvesting, or self-dependency were found.
- The bundled skill contains icon lookup and import guidance, not instructions to access secrets or alter controls.
Behavioral surface
EnvironmentVarsNetwork
MinifiedUrlStrings
NoLicense
Oversized source lightweight scan
Source & flagged code
5 flaggedpackage.jsonView file
•scripts.preinstall = node ./license-check.js
High
Install Time Lifecycle Scripts
Package defines install-time lifecycle scripts.
package.jsonView on unpkg14"scripts": {
"preinstall": "node ./license-check.js",
"build": "node ./build.mjs",
"prepublishOnly": "npm run build",
"lint": "node ./build.mjs"
}
Medium
Suspicious Lifecycle Evidence
The preinstall hook runs a license checker automatically.
package.jsonView on unpkg · L14Icon3d/Icon3d.svelteView file
•stage = ast_semantic_analysis; reason = ast_parse_error; limitedFiles = 397
High
Semantic Analysis Limited
Findings
3 High5 Medium4 Low
HighInstall Time Lifecycle Scriptspackage.json
HighSemantic Analysis LimitedIcon3d/Icon3d.svelte
HighKnown Malware Source Fingerprint Signaturelicense-check.js
MediumNetwork
MediumEnvironment Vars
MediumStructural Risk Force Deep Review
MediumSuspicious Lifecycle Evidencepackage.json
MediumAi Review Evidencelicense-check.js
LowNon Install Lifecycle Scripts
LowScripts Present
LowUrl Strings
LowNo License
Affected versions and remediation
This report applies to @central-icons-svelte/round-filled-radius-2-stroke-2@1.1.320.
See all versions of @central-icons-svelte/round-filled-radius-2-stroke-2 for other recorded verdicts.
- Review the evidence and your use of @central-icons-svelte/round-filled-radius-2-stroke-2@1.1.320 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.