@ory/cursor@1.7.0
Ory plugin for Cursor: scaffolding rules, a local Ory instance, and authentication, authorization, and audit for every tool call
AI Security Review
scanned 4d ago · by lpm-firewall-aiThe package opts into a dependency's automatic install-time analytics and supplies its endpoint. The telemetry includes the user's git email domain, so this is suspicious rather than ordinary anonymous install metrics.
Static reason
No blocking static signals were detected.; previous stored version diff introduced dangerous source
Trigger
The reova dependency's postinstall hook runs during package installation.
Impact
The telemetry discloses an organizational identifier and machine and package details without a separate user action.
Mechanism
The hook discovers this package's enabled reova configuration, reads the email domain from ~/.gitconfig, builds an install event, and posts it to the configured endpoint.
AI rationale
The package opts into a dependency's automatic install-time analytics and supplies its endpoint. The telemetry includes the user's git email domain, so this is suspicious rather than ordinary anonymous install metrics.
Evidence
package.json.lpm-dependency-evidence-ecc72351-09d2-4b7f-a9df-2a22f1be13ec/1/npm-linux/package.json.lpm-dependency-evidence-ecc72351-09d2-4b7f-a9df-2a22f1be13ec/1/npm-linux/index.js.lpm-dependency-evidence-ecc72351-09d2-4b7f-a9df-2a22f1be13ec/1/npm-linux/src/collector.js.lpm-dependency-evidence-ecc72351-09d2-4b7f-a9df-2a22f1be13ec/1/npm-linux/src/tracker.js~/.gitconfig
Network endpoints1
telemetry.reo.dev/data
Decision evidence
public snapshotAI called this Suspicious at 96.0% confidence as Dangerous Capability with medium false-positive risk.
Evidence for warning
- The package enables reova install analytics and configures https://telemetry.reo.dev/data.
- The reova dependency runs a postinstall hook that starts tracking automatically after a short delay.
- The collector reads ~/.gitconfig and adds the user's email domain to the telemetry payload.
- The tracker sends collected data when the package's analytics setting and endpoint are present.
Evidence against
- The payload includes ordinary package, platform, runtime, CI, and random event ID fields.
- The collector sends only the email domain, not the full email address.
- The reova dependency has a global opt-out switch.
Behavioral surface
Filesystem
HighEntropyStringsUrlStrings
Source & flagged code
7 flaggeddist/cli/setup.jsView file
•matchType = previous_version_dangerous_delta
matchedPackage = @ory/cursor@1.5.0
matchedIdentity = npm:QG9yeS9jdXJzb3I:1.5.0
similarity = 0.750
summary = stored previous version shares package body but lacks this dangerous source file
High
Previous Version Dangerous Delta
This package version adds a dangerous source file absent from the previous stored version; route for source-aware review.
dist/cli/setup.jsView on unpkgpackage.jsonView file
37"reova": {
"enabled": true,
"endpoint": "https://telemetry.reo.dev/data"
},
"main": "dist/index.js",
"types": "dist/index.d.ts",
"exports": {
".": {
"types": "./dist/index.d.ts",
"defaul
Medium
Ai Review Evidence
The package enables reova install analytics and configures https://telemetry.reo.dev/data.
package.jsonView on unpkg · L37.lpm-dependency-evidence-ecc72351-09d2-4b7f-a9df-2a22f1be13ec/1/npm-linux/package.json
Findings
1 High6 Medium4 Low
HighPrevious Version Dangerous Deltadist/cli/setup.js
MediumAi Review Evidencepackage.json
MediumSuspicious Lifecycle Evidence.lpm-dependency-evidence-ecc72351-09d2-4b7f-a9df-2a22f1be13ec/1/npm-linux/package.json
MediumSuspicious Lifecycle Evidence.lpm-dependency-evidence-ecc72351-09d2-4b7f-a9df-2a22f1be13ec/1/npm-linux/index.js
MediumAi Review Evidence.lpm-dependency-evidence-ecc72351-09d2-4b7f-a9df-2a22f1be13ec/1/npm-linux/src/collector.js
MediumAi Review Evidence.lpm-dependency-evidence-ecc72351-09d2-4b7f-a9df-2a22f1be13ec/1/npm-linux/src/collector.js
MediumAi Review Evidence.lpm-dependency-evidence-ecc72351-09d2-4b7f-a9df-2a22f1be13ec/1/npm-linux/src/tracker.js
LowScripts Present
LowFilesystem
LowHigh Entropy Strings
Affected versions and remediation
This report applies to @ory/cursor@1.7.0.
See all versions of @ory/cursor for other recorded verdicts.
- Review the evidence and your use of @ory/cursor@1.7.0 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.