@ory/cline@1.7.0
Ory plugin for Cline: scaffolding skills, a local Ory instance, and authentication, authorization, and audit for every tool call
AI Security Review
scanned 4d ago · by lpm-firewall-aiThis version enables a transitive dependency’s install-time telemetry and configures an external endpoint; the dependency automatically reads a Git email domain and sends it with installation data. Because this sends user-identifying data during installation without an explicit consent action, the package is malicious.
Static reason
No blocking static signals were detected.
Trigger
Installing @ory/cline causes reova’s postinstall hook to run.
Impact
An external telemetry endpoint receives user or organization identifying data and package installation details without an explicit install-time consent action.
Mechanism
The hook tracks dependent packages whose manifest enables reova, collects install and system details plus the email domain read from ~/.gitconfig, then POSTs the event to the configured endpoint.
Attack narrative
On installation, reova’s postinstall hook finds @ory/cline’s enabled analytics configuration, reads the email domain from ~/.gitconfig, adds it to install telemetry, and POSTs the payload to telemetry.reo.dev. A global opt-out exists, but the transfer is enabled by default and includes user or organization identifying data.
AI rationale
This version enables a transitive dependency’s install-time telemetry and configures an external endpoint; the dependency automatically reads a Git email domain and sends it with installation data. Because this sends user-identifying data during installation without an explicit consent action, the package is malicious.
Evidence
package.json.lpm-dependency-evidence-a6794b18-c1f1-47d4-811d-ba9c376c0d5e/1/npm-linux/package.json.lpm-dependency-evidence-a6794b18-c1f1-47d4-811d-ba9c376c0d5e/1/npm-linux/index.js.lpm-dependency-evidence-a6794b18-c1f1-47d4-811d-ba9c376c0d5e/1/npm-linux/src/collector.js.lpm-dependency-evidence-a6794b18-c1f1-47d4-811d-ba9c376c0d5e/1/npm-linux/src/tracker.js.lpm-dependency-evidence-a6794b18-c1f1-47d4-811d-ba9c376c0d5e/1/npm-linux/src/sender.js~/.gitconfig
Network endpoints1
Decision evidence
public snapshotAI called this Malicious at 98.0% confidence as Malware with low false-positive risk.
Evidence for block
- The manifest enables reova analytics and configures https://telemetry.reo.dev/data.
- The reova dependency runs node index.js from its postinstall hook, which starts tracking automatically.
- The tracker collects the dependent package’s install event and sends it to the configured endpoint.
- The collector reads the Git-config email domain and includes it in the event metadata.
- The sender makes an HTTP POST with the collected payload.
Evidence against
- The dependency supports global opt-outs through REOVA_ANALYTICS=false and DO_NOT_TRACK, but analytics is enabled by default for this package.
- The collector sends the email domain rather than the full Git email address.
Behavioral surface
EnvironmentVarsFilesystem
Source & flagged code
7 flaggedpackage.jsonView file
49"reova": {
"enabled": true,
"endpoint": "https://telemetry.reo.dev/data"
},
"main": "dist/index.js",
"types": "dist/index.d.ts",
"expo
High
Ai Review Evidence
The manifest enables reova analytics and configures https://telemetry.reo.dev/data.
package.jsonView on unpkg · L49.lpm-dependency-evidence-a6794b18-c1f1-47d4-811d-ba9c376c0d5e/1/npm-linux/package.jsonView file
7"postinstall": "node index.js",
"test": "node test-local-install.js"
},
"keywords": [
"a
High
Suspicious Lifecycle Evidence
The reova dependency runs node index.js from its postinstall hook, which starts tracking automatically.
.lpm-dependency-evidence-a6794b18-c1f1-47d4-811d-ba9c376c0d5e/1/npm-linux/package.jsonView on unpkg · L7Findings
7 High1 Medium2 Low
HighAi Review Evidencepackage.json
HighSuspicious Lifecycle Evidence.lpm-dependency-evidence-a6794b18-c1f1-47d4-811d-ba9c376c0d5e/1/npm-linux/package.json
HighSuspicious Lifecycle Evidence.lpm-dependency-evidence-a6794b18-c1f1-47d4-811d-ba9c376c0d5e/1/npm-linux/index.js
HighAi Review Evidence.lpm-dependency-evidence-a6794b18-c1f1-47d4-811d-ba9c376c0d5e/1/npm-linux/src/collector.js
HighAi Review Evidence.lpm-dependency-evidence-a6794b18-c1f1-47d4-811d-ba9c376c0d5e/1/npm-linux/src/collector.js
HighAi Review Evidence.lpm-dependency-evidence-a6794b18-c1f1-47d4-811d-ba9c376c0d5e/1/npm-linux/src/tracker.js
HighAi Review Evidence.lpm-dependency-evidence-a6794b18-c1f1-47d4-811d-ba9c376c0d5e/1/npm-linux/src/sender.js
MediumEnvironment Vars
LowScripts Present
Affected versions and remediation
This report applies to @ory/cline@1.7.0.
See all versions of @ory/cline for other recorded verdicts.
- Avoid installing @ory/cline@1.7.0. Remove it from direct dependencies and check your lockfile for transitive copies.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
- If this version ran, investigate the affected machine and build environment. Rotate credentials it could access and rebuild from a trusted environment.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.