@osm-conflation-engine/cli@3.4.4
AI Security Review
scanned 4d ago · by lpm-firewall-aiThe package automatically posts project configuration and run details to its service from GitHub Actions, with no evident disclosure or opt-out. The OSM credential and download flows appear related to retrieving OSM data, so the identified issue is warning-level telemetry rather than credential theft or malicious execution.
Static reason
One or more suspicious static signals were detected.; previous stored version diff introduced dangerous source
Trigger
A successful conflate run in GitHub Actions.
Impact
Project metadata and configuration, which may include repository details, file paths, and data-source settings, are disclosed to the package service without an evident opt-out.
Mechanism
The package obtains a GitHub Actions OIDC token and PUTs a serialized run object, including configuration, warnings, and counts, to the run-history API.
AI rationale
The package automatically posts project configuration and run details to its service from GitHub Actions, with no evident disclosure or opt-out. The OSM credential and download flows appear related to retrieving OSM data, so the identified issue is warning-level telemetry rather than credential theft or malicious execution.
Evidence
dist/index.cjs
Network endpoints1
osm-conflation-engine.kyle.kiwi
Decision evidence
public snapshotAI called this Suspicious at 88.0% confidence as Dangerous Capability with medium false-positive risk.
Evidence for warning
- After conflate completes, the package calls its run-history updater.
- In GitHub Actions, the updater obtains an OIDC token and sends a PUT request to the package service.
- The request serializes the run object, which contains the user configuration, warnings, and run counts.
- The manifest exports a library entrypoint and declares no install lifecycle hook.
Evidence against
- The run-history request is limited to GitHub Actions and uses an OIDC token for the package service.
- The package’s OSM credential flow is used for OpenStreetMap access, and the curl process downloads the configured extract.
Behavioral surface
ChildProcessCryptoEnvironmentVarsFilesystemNetwork
HighEntropyStringsMinifiedUrlStrings
Source & flagged code
7 flaggeddist/index.cjsView file
•matchType = previous_version_dangerous_delta
matchedPackage = @osm-conflation-engine/cli@3.4.1
matchedIdentity = npm:[redacted]:3.4.1
similarity = 0.500
summary = stored previous version shares package body but lacks this dangerous source file
Critical
Previous Version Dangerous Delta
This package version adds a dangerous source file absent from the previous stored version; route for source-aware review.
dist/index.cjsView on unpkg1Object.defineProperty(exports,Symbol.toStringTag,{value:`Module`});var e=Object.create,t=Object.defineProperty,n=Object.getOwnPropertyDescriptor,r=Object.getOwnPropertyNames,i=Obje...
L2: `);n.end(),await new Promise(e=>n.on(`finish`,e))}function E(e,t){let n=t||3;switch(e.type){case`GeometryCollection`:throw Error(`not supported`);case`Point`:return[(0,p.latLngToCe...
High
1Object.defineProperty(exports,Symbol.toStringTag,{value:`Module`});var e=Object.create,t=Object.defineProperty,n=Object.getOwnPropertyDescriptor,r=Object.getOwnPropertyNames,i=Obje...
L2: `);n.end(),await new Promise(e=>n.on(`finish`,e))}function E(e,t){let n=t||3;switch(e.type){case`GeometryCollection`:throw Error(`not supported`);case`Point`:return[(0,p.latLngToCe...
Findings
2 Critical5 High2 Medium4 Low
CriticalManifest Confusionpackage.json
CriticalPrevious Version Dangerous Deltadist/index.cjs
HighChild Processdist/index.cjs
HighSame File Env Network Executiondist/index.cjs
HighCommand Output Exfiltrationdist/index.cjs
HighTrigger Reachable Command Output Exfiltrationdist/index.cjs
HighSemantic Analysis Limitedpackage.json
MediumNetwork
MediumEnvironment Vars
LowScripts Present
LowFilesystem
LowHigh Entropy Strings
LowUrl Strings
Affected versions and remediation
This report applies to @osm-conflation-engine/cli@3.4.4.
See all versions of @osm-conflation-engine/cli for other recorded verdicts.
- Review the evidence and your use of @osm-conflation-engine/cli@3.4.4 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.