@osm-conflation-engine/cli@3.6.0
AI Security Review
scanned 4d ago · by lpm-firewall-aiThe download path forwards a Geofabrik authorization cookie to any configured PBF URL, including hosts outside Geofabrik, without restricting the destination. This is concrete credential disclosure when a user runs the download with `OSM_AUTH` set.
Static reason
One or more suspicious static signals were detected.; previous stored version diff introduced dangerous source
Trigger
A caller invokes `run()` with its default download step, sets `OSM_AUTH`, and configures a non-internal `pbf_url`.
Impact
A third-party PBF host can receive an authorization cookie intended for Geofabrik.
Mechanism
The code warns that the URL is not Geofabrik’s internal host but continues authentication; it then sends the resulting cookie in a `Cookie` header to the configured URL.
Attack narrative
When `OSM_AUTH` is set, a non-internal `pbf_url` only triggers a warning; it does not stop authentication. The code obtains a Geofabrik download authorization value, then passes it as a Cookie header to the configured URL with `curl -L`. Since the schema accepts an arbitrary URL, a caller can cause that credential to be disclosed to a third-party host during a normal download run.
AI rationale
The download path forwards a Geofabrik authorization cookie to any configured PBF URL, including hosts outside Geofabrik, without restricting the destination. This is concrete credential disclosure when a user runs the download with `OSM_AUTH` set.
Evidence
dist/index.cjsdist/config.schema.json
Network endpoints3
osm-internal.download.geofabrik.dewww.openstreetmap.orgthe host in configured `pbf_url`
Decision evidence
public snapshotAI called this Malicious at 94.0% confidence as Malware with low false-positive risk.
Evidence for block
- The config schema accepts any string as `pbf_url`; it only recommends Geofabrik’s internal host.
- For a non-internal PBF URL, the code warns but continues the authentication flow when `OSM_AUTH` is set.
- After authentication, the code checks for `gf_download_oauth` and returns that response as the cookie value alongside the original URL.
- The downloader passes that cookie value in a `Cookie` header to the returned URL using `curl -L`.
- Calling `run()` downloads by default unless the caller supplies different steps.
Evidence against
- The package has no install lifecycle scripts, and the download flow runs through the exported `run()` function.
- The username and password from `OSM_AUTH` are posted to OpenStreetMap’s login endpoint; the cross-host disclosure is the resulting Geofabrik authorization cookie.
Behavioral surface
ChildProcessCryptoEnvironmentVarsFilesystemNetwork
HighEntropyStrings
Source & flagged code
7 flaggeddist/index.cjsView file
•matchType = previous_version_dangerous_delta
matchedPackage = @osm-conflation-engine/cli@3.4.1
matchedIdentity = npm:[redacted]:3.4.1
similarity = 0.500
summary = stored previous version shares package body but lacks this dangerous source file
Critical
Previous Version Dangerous Delta
This package version adds a dangerous source file absent from the previous stored version; route for source-aware review.
dist/index.cjsView on unpkg1Object.defineProperty(exports,Symbol.toStringTag,{value:`Module`});var e=Object.create,t=Object.defineProperty,n=Object.getOwnPropertyDescriptor,r=Object.getOwnPropertyNames,i=Obje...
L2: `);n.end(),await new Promise(e=>n.on(`finish`,e))}function D(e,t){let n=t||3;switch(e.type){case`GeometryCollection`:throw Error(`not supported`);case`Point`:return[(0,p.latLngToCe...
High
1Object.defineProperty(exports,Symbol.toStringTag,{value:`Module`});var e=Object.create,t=Object.defineProperty,n=Object.getOwnPropertyDescriptor,r=Object.getOwnPropertyNames,i=Obje...
L2: `);n.end(),await new Promise(e=>n.on(`finish`,e))}function D(e,t){let n=t||3;switch(e.type){case`GeometryCollection`:throw Error(`not supported`);case`Point`:return[(0,p.latLngToCe...
Findings
2 Critical5 High2 Medium4 Low
CriticalManifest Confusionpackage.json
CriticalPrevious Version Dangerous Deltadist/index.cjs
HighChild Processdist/index.cjs
HighSame File Env Network Executiondist/index.cjs
HighCommand Output Exfiltrationdist/index.cjs
HighTrigger Reachable Command Output Exfiltrationdist/index.cjs
HighSemantic Analysis Limitedpackage.json
MediumNetwork
MediumEnvironment Vars
LowScripts Present
LowFilesystem
LowHigh Entropy Strings
LowUrl Strings
Affected versions and remediation
This report applies to @osm-conflation-engine/cli@3.6.0.
See all versions of @osm-conflation-engine/cli for other recorded verdicts.
- Avoid installing @osm-conflation-engine/cli@3.6.0. Remove it from direct dependencies and check your lockfile for transitive copies.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
- If this version ran, investigate the affected machine and build environment. Rotate credentials it could access and rebuild from a trusted environment.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.