@ory/openclaw@1.8.1
Ory plugin for OpenClaw: scaffolding skills, a local Ory instance, and authentication, authorization, and audit for every tool call
AI Security Review
scanned 3d ago · by lpm-firewall-aiThis version enables install-time telemetry through a dependency's postinstall hook and configures its destination. The payload can include a Git email domain, an identifying detail, so this warrants a warning under the install-time telemetry rule.
Static reason
No blocking static signals were detected.; source matched previously finalized malicious package; routed for review; source fingerprint signature matched known malicious package; routed for review
Trigger
Installing the package runs the reova dependency's postinstall hook.
Impact
The install reports identifying organizational information and system details without a separate user prompt.
Mechanism
The hook discovers the consuming package, collects telemetry, and sends it to the endpoint configured in this package's manifest.
AI rationale
This version enables install-time telemetry through a dependency's postinstall hook and configures its destination. The payload can include a Git email domain, an identifying detail, so this warrants a warning under the install-time telemetry rule.
Evidence
package.json.lpm-dependency-evidence-60992288-a71c-4098-9b6f-cddba19b35ee/1/npm-linux/package.json.lpm-dependency-evidence-60992288-a71c-4098-9b6f-cddba19b35ee/1/npm-linux/index.js.lpm-dependency-evidence-60992288-a71c-4098-9b6f-cddba19b35ee/1/npm-linux/src/tracker.js.lpm-dependency-evidence-60992288-a71c-4098-9b6f-cddba19b35ee/1/npm-linux/src/collector.js~/.gitconfig
Network endpoints1
telemetry.reo.dev/data
Decision evidence
public snapshotAI called this Suspicious at 99.0% confidence as Dangerous Capability with medium false-positive risk.
Evidence for warning
- The package enables reova telemetry by default and configures https://telemetry.reo.dev/data.
- reova declares a postinstall script that starts its tracker.
- The tracker collects install data and sends it to the configured endpoint.
- The install payload includes package and system details, and may include the domain from ~/.gitconfig.
Evidence against
- The package itself declares no lifecycle scripts.
- The inspected payload does not include the full Git email address or environment variable values.
Behavioral surface
Filesystem
UrlStrings
Source & flagged code
9 flaggeddist/cli/plugin-config.js#virtual:normalized:round1View file
•stage = ast_semantic_analysis; reason = ast_parse_error; limitedFiles = 1
High
Semantic Analysis Limited
A bounded semantic-analysis stage reached its safety limit; remaining detectors completed, but this package requires AI review.
dist/cli/plugin-config.js#virtual:normalized:round1View on unpkgdist/cli/main.jsView file
•matchType = normalized_sha256
matchedPackage = @ory/openclaw@1.8.0
matchedPath = dist/cli/main.js
matchedIdentity = npm:QG9yeS9vcGVuY2xhdw:1.8.0
similarity = 1.000
summary = normalized source hash matched finalized malicious source
High
Known Malware Source Similarity
Source file is highly similar to a previously finalized malicious package; route for source-aware review.
dist/cli/main.jsView on unpkg•matchType = malicious_source_fingerprint_signature
signature = cb39df1824699613
signatureType = suspicious_hashes
sourceLabel = final_verdict:malicious
matchedPackage = @ory/openclaw@1.8.0
matchedPath = dist/cli/main.js
matchedIdentity = npm:QG9yeS9vcGVuY2xhdw:1.8.0
similarity = 1.000
shingleOverlap = 6
summary = package final verdict is malicious
Findings
3 High6 Medium3 Low
HighSemantic Analysis Limiteddist/cli/plugin-config.js#virtual:normalized:round1
HighKnown Malware Source Similaritydist/cli/main.js
HighKnown Malware Source Fingerprint Signaturedist/cli/main.js
MediumAi Review Evidencepackage.json
MediumSuspicious Lifecycle Evidence.lpm-dependency-evidence-60992288-a71c-4098-9b6f-cddba19b35ee/1/npm-linux/package.json
MediumSuspicious Lifecycle Evidence.lpm-dependency-evidence-60992288-a71c-4098-9b6f-cddba19b35ee/1/npm-linux/index.js
MediumAi Review Evidence.lpm-dependency-evidence-60992288-a71c-4098-9b6f-cddba19b35ee/1/npm-linux/src/tracker.js
MediumAi Review Evidence.lpm-dependency-evidence-60992288-a71c-4098-9b6f-cddba19b35ee/1/npm-linux/src/collector.js
MediumAi Review Evidence.lpm-dependency-evidence-60992288-a71c-4098-9b6f-cddba19b35ee/1/npm-linux/src/collector.js
Affected versions and remediation
This report applies to @ory/openclaw@1.8.1.
See all versions of @ory/openclaw for other recorded verdicts.
- Review the evidence and your use of @ory/openclaw@1.8.1 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.