@osm-conflation-engine/cli@3.5.1
AI Security Review
scanned 4d ago · by lpm-firewall-aiThe package automatically uploads configuration that can include a repository URL and local file path to its own service during GitHub Actions runs. This is undisclosed runtime telemetry carrying identifying details, so it warrants a warning rather than a publish block.
Static reason
One or more suspicious static signals were detected.; previous stored version diff introduced dangerous source
Trigger
A conflate run completes in GitHub Actions.
Impact
The upload can expose identifying project details, including a repository URL and local source-data path, without an evident opt-in.
Mechanism
The code obtains an OIDC token for osm-conflation-engine and PUTs a JSON object containing config, warnings, and run counts to the run_history endpoint.
AI rationale
The package automatically uploads configuration that can include a repository URL and local file path to its own service during GitHub Actions runs. This is undisclosed runtime telemetry carrying identifying details, so it warrants a warning rather than a publish block.
Evidence
dist/index.cjsdist/config.schema.json
Network endpoints1
osm-conflation-engine.kyle.kiwi
Decision evidence
public snapshotAI called this Suspicious at 93.0% confidence as Dangerous Capability with medium false-positive risk.
Evidence for warning
- After a conflate run, code in GitHub Actions obtains an OIDC token for osm-conflation-engine and sends a PUT request to the package service's run_history endpoint with JSON.stringify(e) as the body.
- The uploaded object includes the full config, warnings, and run counts.
- The config schema allows values such as a GitHub repository URL and a local source-data file path, so the upload can include identifying project details.
Evidence against
- The upload is limited to GitHub Actions and uses an OIDC token addressed to the package's own service.
- The manifest has no preinstall, install, or postinstall hook.
Behavioral surface
ChildProcessCryptoEnvironmentVarsFilesystemNetwork
HighEntropyStringsMinifiedUrlStrings
Source & flagged code
7 flaggeddist/index.cjsView file
•matchType = previous_version_dangerous_delta
matchedPackage = @osm-conflation-engine/cli@3.4.1
matchedIdentity = npm:[redacted]:3.4.1
similarity = 0.500
summary = stored previous version shares package body but lacks this dangerous source file
Critical
Previous Version Dangerous Delta
This package version adds a dangerous source file absent from the previous stored version; route for source-aware review.
dist/index.cjsView on unpkg1Object.defineProperty(exports,Symbol.toStringTag,{value:`Module`});var e=Object.create,t=Object.defineProperty,n=Object.getOwnPropertyDescriptor,r=Object.getOwnPropertyNames,i=Obje...
L2: `);n.end(),await new Promise(e=>n.on(`finish`,e))}function D(e,t){let n=t||3;switch(e.type){case`GeometryCollection`:throw Error(`not supported`);case`Point`:return[(0,p.latLngToCe...
High
1Object.defineProperty(exports,Symbol.toStringTag,{value:`Module`});var e=Object.create,t=Object.defineProperty,n=Object.getOwnPropertyDescriptor,r=Object.getOwnPropertyNames,i=Obje...
L2: `);n.end(),await new Promise(e=>n.on(`finish`,e))}function D(e,t){let n=t||3;switch(e.type){case`GeometryCollection`:throw Error(`not supported`);case`Point`:return[(0,p.latLngToCe...
Findings
2 Critical5 High2 Medium4 Low
CriticalManifest Confusionpackage.json
CriticalPrevious Version Dangerous Deltadist/index.cjs
HighChild Processdist/index.cjs
HighSame File Env Network Executiondist/index.cjs
HighCommand Output Exfiltrationdist/index.cjs
HighTrigger Reachable Command Output Exfiltrationdist/index.cjs
HighSemantic Analysis Limitedpackage.json
MediumNetwork
MediumEnvironment Vars
LowScripts Present
LowFilesystem
LowHigh Entropy Strings
LowUrl Strings
Affected versions and remediation
This report applies to @osm-conflation-engine/cli@3.5.1.
See all versions of @osm-conflation-engine/cli for other recorded verdicts.
- Review the evidence and your use of @osm-conflation-engine/cli@3.5.1 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.