@ory/cline@1.9.0
Ory plugin for Cline: scaffolding skills, a local Ory instance, and authentication, authorization, and audit for every tool call
AI Security Review
scanned 2d ago · by lpm-firewall-aiThe package enables install-time telemetry that runs through a dependency’s postinstall hook and includes the installer’s git email domain, an identifying organizational detail. The limited payload and opt-out controls reduce the risk, but do not remove the concern with telemetry enabled during installation by default.
Static reason
No blocking static signals were detected.; source fingerprint signature matched known malicious package; routed for review
Trigger
Installing the package runs the reova dependency’s postinstall tracker.
Impact
Installers’ machine and organizational metadata is transmitted automatically; this is undisclosed install-time telemetry, so warn users.
Mechanism
The tracker gathers package, runtime, machine and installation data plus the domain from ~/.gitconfig, then posts the payload to the configured telemetry endpoint.
AI rationale
The package enables install-time telemetry that runs through a dependency’s postinstall hook and includes the installer’s git email domain, an identifying organizational detail. The limited payload and opt-out controls reduce the risk, but do not remove the concern with telemetry enabled during installation by default.
Evidence
package.json.lpm-dependency-evidence-ecce3761-061b-47d6-8e43-3f6e852fe902/1/npm-linux/package.json.lpm-dependency-evidence-ecce3761-061b-47d6-8e43-3f6e852fe902/1/npm-linux/index.js.lpm-dependency-evidence-ecce3761-061b-47d6-8e43-3f6e852fe902/1/npm-linux/src/collector.js.lpm-dependency-evidence-ecce3761-061b-47d6-8e43-3f6e852fe902/1/npm-linux/src/tracker.js.lpm-dependency-evidence-ecce3761-061b-47d6-8e43-3f6e852fe902/1/npm-linux/src/sender.js~/.gitconfig
Network endpoints1
telemetry.reo.dev/data
Decision evidence
public snapshotAI called this Suspicious at 91.0% confidence as Unknown with medium false-positive risk.
Evidence for warning
- The package manifest enables reova telemetry and configures https://telemetry.reo.dev/data.
- The reova dependency runs its tracker from a postinstall script.
- The install payload includes package and runtime details, machine specs, a random event ID, and the domain extracted from the installer’s git email.
- The tracker collects and sends data when the package is enabled and an endpoint is configured; the sender makes an HTTP(S) request.
Evidence against
- The package itself declares no lifecycle scripts; the install-time behavior comes from its reova dependency.
- The collector extracts only the git email domain, not the full address, and its documented payload omits environment variables and file paths.
- The telemetry has a package-level enablement check and can be disabled with global opt-out settings.
Behavioral surface
EnvironmentVarsFilesystem
Source & flagged code
8 flaggeddist/cli/main.jsView file
•matchType = malicious_source_fingerprint_signature
signature = 6962edcbe49e448b
signatureType = suspicious_hashes
sourceLabel = final_verdict:malicious
matchedPackage = @ory/cline@1.8.1
matchedPath = dist/cli/main.js
matchedIdentity = npm:QG9yeS9jbGluZQ:1.8.1
similarity = 1.000
shingleOverlap = 7
summary = package final verdict is malicious
High
Known Malware Source Fingerprint Signature
Source fingerprint signature matches a known malicious package signature; route for source-aware review.
dist/cli/main.jsView on unpkgpackage.jsonView file
49"reova": {
"enabled": true,
"endpoint": "https://telemetry.reo.dev/data"
},
"main": "dist/index.
Medium
Ai Review Evidence
The package manifest enables reova telemetry and configures https://telemetry.reo.dev/data.
package.jsonView on unpkg · L49.lpm-dependency-evidence-ecce3761-061b-47d6-8e43-3f6e852fe902/1/npm-linux/package.json
Findings
1 High8 Medium2 Low
HighKnown Malware Source Fingerprint Signaturedist/cli/main.js
MediumEnvironment Vars
MediumAi Review Evidencepackage.json
MediumSuspicious Lifecycle Evidence.lpm-dependency-evidence-ecce3761-061b-47d6-8e43-3f6e852fe902/1/npm-linux/package.json
MediumSuspicious Lifecycle Evidence.lpm-dependency-evidence-ecce3761-061b-47d6-8e43-3f6e852fe902/1/npm-linux/index.js
MediumAi Review Evidence.lpm-dependency-evidence-ecce3761-061b-47d6-8e43-3f6e852fe902/1/npm-linux/src/collector.js
MediumAi Review Evidence.lpm-dependency-evidence-ecce3761-061b-47d6-8e43-3f6e852fe902/1/npm-linux/src/collector.js
MediumAi Review Evidence.lpm-dependency-evidence-ecce3761-061b-47d6-8e43-3f6e852fe902/1/npm-linux/src/tracker.js
MediumAi Review Evidence.lpm-dependency-evidence-ecce3761-061b-47d6-8e43-3f6e852fe902/1/npm-linux/src/sender.js
Affected versions and remediation
This report applies to @ory/cline@1.9.0.
See all versions of @ory/cline for other recorded verdicts.
- Review the evidence and your use of @ory/cline@1.9.0 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.