Loading npm security reports…
A collection of round outlined Svelte icons with 2px radius and 2px stroke width, designed for use in Svelte applications.
No attack was identified in the inspected source. The preinstall hook checks a supplied license key with the vendor endpoint, while the flagged icon file contains SVG markup.
Package defines install-time lifecycle scripts.
package.jsonView on unpkgpackage.json runs license-check.js during preinstall.
package.jsonView on unpkg · L15A bounded semantic-analysis stage reached its safety limit; remaining detectors completed, but this package requires AI review.
Icon3d/Icon3d.svelteView on unpkgIcon3d/Icon3d.svelte contains SVG icon markup and a CentralIconBase component.
Icon3d/Icon3d.svelteView on unpkg · L4Source fingerprint signature matches a known malicious package signature; route for source-aware review.
license-check.jsView on unpkglicense-check.js requires CENTRAL_LICENSE_KEY and sends it as a bearer token to centralicons.com for a license check.
license-check.jsView on unpkg · L1This report applies to @central-icons-svelte/round-outlined-radius-2-stroke-2@1.2.4.
See version security history for other recorded verdicts.
Evidence last updated: .
Package defines install-time lifecycle scripts.
package.jsonView on unpkg · L15package.json runs license-check.js during preinstall.
package.jsonView on unpkg · L15Icon3d/Icon3d.svelte contains SVG icon markup and a CentralIconBase component.
Icon3d/Icon3d.svelteView on unpkg · L4A bounded semantic-analysis stage reached its safety limit; remaining detectors completed, but this package requires AI review.
Icon3d/Icon3d.svelteView on unpkglicense-check.js requires CENTRAL_LICENSE_KEY and sends it as a bearer token to centralicons.com for a license check.
license-check.jsView on unpkg · L1Source fingerprint signature matches a known malicious package signature; route for source-aware review.
license-check.jsView on unpkg