@ory/continue@1.8.0
Ory plugin for Continue CLI (cn): scaffolding skills, a local Ory instance, and authentication, authorization, and audit for every tool call
AI Security Review
scanned 3d ago · by lpm-firewall-aiThe package enables install-time telemetry through a dependency hook, and the payload includes an email domain read from the user's Git configuration. That Git-derived identifier is sent automatically to telemetry.reo.dev without installer consent.
Static reason
No blocking static signals were detected.
Trigger
Installing the package and running the dependency's postinstall hook.
Impact
Exposes an organizational identifier derived from Git configuration during installation.
Mechanism
The hook discovers dependent packages with reova enabled, reads the Git email from ~/.gitconfig, includes its domain in the analytics payload, and posts the payload to the configured endpoint.
Attack narrative
During installation, reova's postinstall hook tracks this package because its manifest enables reova and supplies an endpoint. The tracker reads the user's Git email configuration, extracts the domain, places it in the analytics payload, and sends that payload to telemetry.reo.dev. Sending this Git-derived organizational data automatically during install is unauthorized data exfiltration.
AI rationale
The package enables install-time telemetry through a dependency hook, and the payload includes an email domain read from the user's Git configuration. That Git-derived identifier is sent automatically to telemetry.reo.dev without installer consent.
Evidence
package.json.lpm-dependency-evidence-30184ea6-98af-42e4-9e1d-05a7086ecf4b/1/npm-linux/package.json.lpm-dependency-evidence-30184ea6-98af-42e4-9e1d-05a7086ecf4b/1/npm-linux/src/collector.js.lpm-dependency-evidence-30184ea6-98af-42e4-9e1d-05a7086ecf4b/1/npm-linux/src/tracker.js~/.gitconfig
Network endpoints1
telemetry.reo.dev
Decision evidence
public snapshotAI called this Malicious at 97.0% confidence as Malware with low false-positive risk.
Evidence for block
- The manifest enables `reova` and configures `https://telemetry.reo.dev/data`.
- The `reova` dependency runs `node index.js` from its `postinstall` hook, which starts tracking automatically during installation.
- The tracker reads the Git email from `~/.gitconfig` and adds its domain to the analytics payload.
- The tracker sends the collected payload to the configured endpoint.
Evidence against
- The collector sends only the email domain, not the full address.
- The payload also contains package and version, basic system details, a CI flag, and a random install ID.
Behavioral surface
Filesystem
HighEntropyStrings
Source & flagged code
5 flaggedpackage.jsonView file
50"reova": {
"enabled": true,
"endpoint": "https://telemetry.reo.dev/data"
},
"main": "dist/index.js",
"types": "dist/index.d.ts",
"exports": {
".": {
"ty
High
Ai Review Evidence
The manifest enables `reova` and configures `https://telemetry.reo.dev/data`.
package.jsonView on unpkg · L50.lpm-dependency-evidence-30184ea6-98af-42e4-9e1d-05a7086ecf4b/1/npm-linux/package.jsonView file
6"scripts": {
"postinstall": "node index.js",
"test": "node test-local-install.js"
},
High
Suspicious Lifecycle Evidence
The `reova` dependency runs `node index.js` from its `postinstall` hook, which starts tracking automatically during installation.
.lpm-dependency-evidence-30184ea6-98af-42e4-9e1d-05a7086ecf4b/1/npm-linux/package.jsonView on unpkg · L6Findings
5 High3 Low
HighAi Review Evidencepackage.json
HighSuspicious Lifecycle Evidence.lpm-dependency-evidence-30184ea6-98af-42e4-9e1d-05a7086ecf4b/1/npm-linux/package.json
HighAi Review Evidence.lpm-dependency-evidence-30184ea6-98af-42e4-9e1d-05a7086ecf4b/1/npm-linux/src/collector.js
HighAi Review Evidence.lpm-dependency-evidence-30184ea6-98af-42e4-9e1d-05a7086ecf4b/1/npm-linux/src/collector.js
HighAi Review Evidence.lpm-dependency-evidence-30184ea6-98af-42e4-9e1d-05a7086ecf4b/1/npm-linux/src/tracker.js
LowScripts Present
LowFilesystem
LowHigh Entropy Strings
Affected versions and remediation
This report applies to @ory/continue@1.8.0.
See all versions of @ory/continue for other recorded verdicts.
- Avoid installing @ory/continue@1.8.0. Remove it from direct dependencies and check your lockfile for transitive copies.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
- If this version ran, investigate the affected machine and build environment. Rotate credentials it could access and rebuild from a trusted environment.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.