@ory/cursor@1.8.0
Ory plugin for Cursor: scaffolding rules, a local Ory instance, and authentication, authorization, and audit for every tool call
AI Security Review
scanned 3d ago · by lpm-firewall-aiThe package enables its dependency’s install-time telemetry and supplies an endpoint, causing the dependency’s postinstall hook to send the Git email domain along with install metadata. Because this is Git-related user data sent automatically during installation, the behavior meets the install-time data exfiltration rule.
Static reason
No blocking static signals were detected.
Trigger
Installing the package with dependency lifecycle scripts enabled.
Impact
The installer’s Git organization domain and installation metadata are disclosed without the installer’s direct consent.
Mechanism
The `reova` postinstall discovers this package’s opt-in settings, reads the Git email domain from `~/.gitconfig`, and POSTs an install payload to the configured endpoint.
Attack narrative
During installation, the `reova` dependency’s postinstall hook discovers this package’s enabled telemetry configuration. It reads the Git email from `~/.gitconfig`, extracts the domain, adds it to an npm install payload, and POSTs that payload to `telemetry.reo.dev`. This sends Git-related user or organization data automatically during installation.
AI rationale
The package enables its dependency’s install-time telemetry and supplies an endpoint, causing the dependency’s postinstall hook to send the Git email domain along with install metadata. Because this is Git-related user data sent automatically during installation, the behavior meets the install-time data exfiltration rule.
Evidence
package.json.lpm-dependency-evidence-c6996883-332e-469a-9659-b5f5a576ff20/1/npm-linux/package.json.lpm-dependency-evidence-c6996883-332e-469a-9659-b5f5a576ff20/1/npm-linux/index.js.lpm-dependency-evidence-c6996883-332e-469a-9659-b5f5a576ff20/1/npm-linux/src/collector.js.lpm-dependency-evidence-c6996883-332e-469a-9659-b5f5a576ff20/1/npm-linux/src/sender.js~/.gitconfig
Network endpoints2
telemetry.reo.devtelemetry.reo.dev/data
Decision evidence
public snapshotAI called this Malicious at 98.0% confidence as Malware with low false-positive risk.
Evidence for block
- The package enables `reova` and configures `https://telemetry.reo.dev/data`.
- Its `reova` dependency runs `node index.js` in a postinstall hook, which starts tracking.
- The tracker collects the configured package’s install data and sends it when enabled and given an endpoint.
- The collector reads the Git email from `~/.gitconfig`, extracts its domain, and includes that domain in the payload.
- The sender POSTs the payload to the configured endpoint.
Evidence against
- The top-level package declares no lifecycle scripts of its own.
- The collector sends only the Git email domain, not the full address; the payload also includes ordinary platform and runtime fields.
Behavioral surface
Filesystem
HighEntropyStringsUrlStrings
Source & flagged code
8 flaggedpackage.jsonView file
37"reova": {
"enabled": true,
"endpoint": "https://telemetry.reo.dev/data"
},
"main": "dist/index.js",
"types": "dist/index.d.ts",
"ex
High
Ai Review Evidence
The package enables `reova` and configures `https://telemetry.reo.dev/data`.
package.jsonView on unpkg · L37.lpm-dependency-evidence-c6996883-332e-469a-9659-b5f5a576ff20/1/npm-linux/package.jsonView file
5"main": "lib.js",
"scripts": {
"postinstall": "node index.js",
"test": "node test-local-install.js"
},
"keywords":
High
Suspicious Lifecycle Evidence
Its `reova` dependency runs `node index.js` in a postinstall hook, which starts tracking.
.lpm-dependency-evidence-c6996883-332e-469a-9659-b5f5a576ff20/1/npm-linux/package.jsonView on unpkg · L5Findings
8 High4 Low
HighAi Review Evidencepackage.json
HighSuspicious Lifecycle Evidence.lpm-dependency-evidence-c6996883-332e-469a-9659-b5f5a576ff20/1/npm-linux/package.json
HighSuspicious Lifecycle Evidence.lpm-dependency-evidence-c6996883-332e-469a-9659-b5f5a576ff20/1/npm-linux/index.js
HighAi Review Evidence.lpm-dependency-evidence-c6996883-332e-469a-9659-b5f5a576ff20/1/npm-linux/src/tracker.js
HighAi Review Evidence.lpm-dependency-evidence-c6996883-332e-469a-9659-b5f5a576ff20/1/npm-linux/src/collector.js
HighAi Review Evidence.lpm-dependency-evidence-c6996883-332e-469a-9659-b5f5a576ff20/1/npm-linux/src/collector.js
HighAi Review Evidence.lpm-dependency-evidence-c6996883-332e-469a-9659-b5f5a576ff20/1/npm-linux/src/collector.js
HighAi Review Evidence.lpm-dependency-evidence-c6996883-332e-469a-9659-b5f5a576ff20/1/npm-linux/src/sender.js
Affected versions and remediation
This report applies to @ory/cursor@1.8.0.
See all versions of @ory/cursor for other recorded verdicts.
- Avoid installing @ory/cursor@1.8.0. Remove it from direct dependencies and check your lockfile for transitive copies.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
- If this version ran, investigate the affected machine and build environment. Rotate credentials it could access and rebuild from a trusted environment.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.