@ory/continue@1.8.1
Ory plugin for Continue CLI (cn): scaffolding skills, a local Ory instance, and authentication, authorization, and audit for every tool call
AI Security Review
scanned 3d ago · by lpm-firewall-aiThe package enables install-time analytics by default, and the payload includes an identifier read from the installer's Git configuration. This fits the warning-only telemetry category: the collector excludes the full email address, paths, and environment variables.
Static reason
No blocking static signals were detected.; source fingerprint signature matched known malicious package; routed for review
Trigger
Installing the package runs reova's postinstall hook.
Impact
The endpoint receives install telemetry and an organizational identifier derived from the installer's Git configuration.
Mechanism
The hook collects package and machine details plus the Git email domain, then posts the payload to the configured analytics endpoint.
AI rationale
The package enables install-time analytics by default, and the payload includes an identifier read from the installer's Git configuration. This fits the warning-only telemetry category: the collector excludes the full email address, paths, and environment variables.
Evidence
package.json.lpm-dependency-evidence-7f207125-d44a-4de8-a402-ad5d7c1f2ab7/1/npm-linux/package.json.lpm-dependency-evidence-7f207125-d44a-4de8-a402-ad5d7c1f2ab7/1/npm-linux/index.js.lpm-dependency-evidence-7f207125-d44a-4de8-a402-ad5d7c1f2ab7/1/npm-linux/src/tracker.js.lpm-dependency-evidence-7f207125-d44a-4de8-a402-ad5d7c1f2ab7/1/npm-linux/src/collector.js.lpm-dependency-evidence-7f207125-d44a-4de8-a402-ad5d7c1f2ab7/1/npm-linux/src/sender.js~/.gitconfig
Network endpoints1
telemetry.reo.dev/data
Decision evidence
public snapshotAI called this Suspicious at 97.0% confidence as Unknown with medium false-positive risk.
Evidence for warning
- The package depends on reova and sets its install analytics to enabled with endpoint https://telemetry.reo.dev/data.
- reova declares a postinstall script that runs its tracker.
- The postinstall tracker collects and sends analytics for dependent packages when analytics are enabled and an endpoint is configured.
- The install payload includes package details and system information such as platform, architecture, Node version, OS release, and CPU count.
- The collector reads the Git email from ~/.gitconfig and adds its domain to the payload as an organizational signal.
- The sender makes an HTTP POST to the configured endpoint.
Evidence against
- The collector sends only the Git email domain, not the full address.
- The documented payload excludes environment variables, file paths, and the dependency list.
Behavioral surface
Filesystem
HighEntropyStrings
Source & flagged code
7 flaggeddist/cli/main.jsView file
•matchType = malicious_source_fingerprint_signature
signature = 45c83cb58571f3df
signatureType = suspicious_hashes
sourceLabel = final_verdict:malicious
matchedPackage = @ory/continue@1.8.0
matchedPath = dist/cli/main.js
matchedIdentity = npm:QG9yeS9jb250aW51ZQ:1.8.0
similarity = 1.000
shingleOverlap = 7
summary = package final verdict is malicious
High
Known Malware Source Fingerprint Signature
Source fingerprint signature matches a known malicious package signature; route for source-aware review.
dist/cli/main.jsView on unpkgpackage.jsonView file
50"reova": {
"enabled": true,
"endpoint": "https://telemetry.reo.dev/data"
},
"main": "dist/index.js",
"types":
Medium
Ai Review Evidence
The package depends on reova and sets its install analytics to enabled with endpoint https://telemetry.reo.dev/data.
package.jsonView on unpkg · L50.lpm-dependency-evidence-7f207125-d44a-4de8-a402-ad5d7c1f2ab7/1/npm-linux/package.json
Findings
1 High6 Medium3 Low
HighKnown Malware Source Fingerprint Signaturedist/cli/main.js
MediumAi Review Evidencepackage.json
MediumSuspicious Lifecycle Evidence.lpm-dependency-evidence-7f207125-d44a-4de8-a402-ad5d7c1f2ab7/1/npm-linux/package.json
MediumSuspicious Lifecycle Evidence.lpm-dependency-evidence-7f207125-d44a-4de8-a402-ad5d7c1f2ab7/1/npm-linux/src/tracker.js
MediumAi Review Evidence.lpm-dependency-evidence-7f207125-d44a-4de8-a402-ad5d7c1f2ab7/1/npm-linux/src/collector.js
MediumAi Review Evidence.lpm-dependency-evidence-7f207125-d44a-4de8-a402-ad5d7c1f2ab7/1/npm-linux/src/collector.js
MediumAi Review Evidence.lpm-dependency-evidence-7f207125-d44a-4de8-a402-ad5d7c1f2ab7/1/npm-linux/src/sender.js
LowScripts Present
LowFilesystem
LowHigh Entropy Strings
Affected versions and remediation
This report applies to @ory/continue@1.8.1.
See all versions of @ory/continue for other recorded verdicts.
- Review the evidence and your use of @ory/continue@1.8.1 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.