registry / @uipath/api-workflow-tool / 1.200.0

@uipath/api-workflow-tool@1.200.0

Run UiPath API Workflows locally.

AI Security Review

scanned 1mo ago · by lpm-firewall-ai

The published metadata has no lifecycle scripts, and the entrypoints only register a first-party UiPath workflow and packager tool. Child process, environment, and script evaluation usage is inside user-invoked runtime bundles aimed at local projects and cloud.uipath.com.

Static reason

One or more suspicious static signals were detected.; previous stored version diff introduced dangerous source

Trigger

A caller imports dist/tool.js or dist/packager-tool.js and invokes the exported command registration.

Impact

No unsolicited mutation, credential theft, or remote payload execution was established from the inspected entrypoints.

Mechanism

Imported modules expose local filesystem, process, and UiPath cloud authentication helpers used to run or package workflows the user requested.

AI rationale

Decision evidence

public snapshot

AI called this Clean at 78.0% confidence as Benign with medium false-positive risk.

Evidence for AI clean decision

package.json names a local UiPath workflow tool, points main and exports at dist/tool.js and dist/packager-tool.js, and declares no install lifecycle scripts.
dist/node-r2hghss1.js defines ProjectToolExecutor for caller-driven project restore, validate, and build.
dist/packager-tool-9yfnj0t1.js is project-packager localization and validation text for local project directories.
dist/packager-tool-4f38v0ry.js is a Node filesystem helper whose getenv reads process.env only when the tool calls it.
dist/packager-tool-t2bsmmmr.js imports first-party UiPath auth constants and exports commander registerCommands.

Evidence against

Bundled child_process and Function constructors sit in workflow and dependency bundles and run only after an explicit import, with no preinstall, install, or postinstall hook.
The default service host is https://cloud.uipath.com, aligned with the package identity, and there is no hidden export of credentials to an unrelated host.

Behavioral surface

Source

ChildProcessCryptoEnvironmentVars

Source & flagged code

8 flagged

dist/packager-tool-9yfnj0t1.jsView file

Lines 1285-1325javascript

1285I18nManager.registerTranslations("ja", ja_default);

1286I18nManager.registerTranslations("ko", ko_default);

1287I18nManager.registerTranslations("pt", pt_default);

1288I18nManager.registerTranslations("pt-BR", pt_BR_default);

1289I18nManager.registerTranslations("ro", ro_default);

1290I18nManager.registerTranslations("ru", ru_default);

1291I18nManager.registerTranslations("tr", tr_default);

1292I18nManager.registerTranslations("zh-CN", zh_CN_default);

1293I18nManager.registerTranslations("zh-TW", zh_TW_default);

1294I18nManager.registerTranslations("zu", zu_default);

1295

1296// ../common/dist/index.js

1297import { createRequire } from "node:module";

1298import { randomUUID } from "node:crypto";

1299import { existsSync } from "node:fs";

1300import * as fs6 from "node:fs/promises";

1301import * as os2 from "node:os";

1302import * as path2 from "node:path";

1303import process8 from "node:process";

1304import path from "node:path";

1305import { fileURLToPath } from "node:url";

1306import childProcess3 from "node:child_process";

1307import fs5, { constants as fsConstants2 } from "node:fs/promises";

High

Child Process

Package source references child process execution.

dist/packager-tool-9yfnj0t1.jsView on unpkg · L1305

1308import { promisify as promisify2 } from "node:util";

1309import childProcess2 from "node:child_process";

1310import fs4, { constants as fsConstants } from "node:fs/promises";

1311import process2 from "node:process";

1312import os from "node:os";

1313import fs3 from "node:fs";

1314import fs2 from "node:fs";

1315import fs from "node:fs";

1316import process3 from "node:process";

1317import { Buffer as Buffer2 } from "node:buffer";

1318import { promisify } from "node:util";

1319import childProcess from "node:child_process";

1320import { promisify as promisify6 } from "node:util";

1321import process6 from "node:process";

1322import { execFile as execFile6 } from "node:child_process";

1323import { promisify as promisify3 } from "node:util";

1324import process4 from "node:process";

1325import { execFile as execFile3 } from "node:child_process";

Lines 10397-10437javascript

10397 } : {}

10398 };

10399 return enriched;

10400 }

10401 generateId() {

10402 const bytes = new Uint8Array(8);

10403

dist/node-r2hghss1.jsView file

Lines 8-48javascript

8 ProjectTypes,

9 TargetFramework,

10 TemporaryStorageService,

11 ToolErrorCodes,

12 ToolResult,

13 ZipService,

14 toolsFactoryRepository,

15 translate

16} from "./packager-tool-h1tyrbff.js";

17import"./packager-tool-wckvcay0.js"

dist/index.umd.min-drpc57vn.jsView file

Lines 1814-1854javascript

1814 constructor(e2) {

1815 var t2;

1816 let n2;

1817 this.refs = {}, this.dynamicAnchors = {}, typeof e2.schema == "object"

dist/packager-tool-t2bsmmmr.jsView file

27class CommanderError extends Error { L28: constructor(exitCode, code, message) { L29: super(message); ... L745: var EventEmitter = __require("node:events").EventEmitter; L746: var childProcess = __require("node:child_process"); L747: var path = __require("node:path"); ... L791: this._outputConfiguration = { L792: writeOut: (str) => process2.stdout.write(str), L793: writeErr: (str) => process2.stderr.write(str), ... L4345: const sanitizedData = redactor(data); L4346: return JSON.parse(sanitizedData); L4347: } catch (error) {

High

Obfuscated Payload Loader

Source contains an obfuscated payload loader that reconstructs and executes hidden code.

dist/packager-tool-t2bsmmmr.jsView on unpkg · L27

dist/packager-tool-4f38v0ry.jsView file

•stage = ast_semantic_analysis; reason = ast_alias_growth_limit_exceeded; limitedFiles = 1

High

Semantic Analysis Limited

A bounded semantic-analysis stage reached its safety limit; remaining detectors completed, but this package requires AI review.

dist/packager-tool-4f38v0ry.jsView on unpkg

Source & flagged code

8 flagged · loading source

dist/packager-tool-9yfnj0t1.jsView file

1305import { fileURLToPath } from "node:url"; L1306: import childProcess3 from "node:child_process"; L1307: import fs5, { constants as fsConstants2 } from "node:fs/promises";

High

Child Process

Package source references child process execution.

dist/packager-tool-9yfnj0t1.jsView on unpkg · L1305

10417var telemetryInstanceSlot = singleton("TelemetryService"); L10418: var DEFAULT_AI_CONNECTION_STRING = atob("[redacted]... L10419: function getGlobalTelemetryInstance() {

High

Base64 Obscured Url

Source decodes a Base64-obscured HTTP endpoint at runtime.

dist/packager-tool-9yfnj0t1.jsView on unpkg · L10417

dist/node-r2hghss1.jsView file

•matchType = previous_version_dangerous_delta matchedPackage = @uipath/api-workflow-tool@1.201.0 matchedIdentity = npm:[redacted]:1.201.0 similarity = 0.579 summary = stored previous version shares package body but lacks this dangerous source file

Findings

1 Critical6 High3 Medium4 Low

CriticalPrevious Version Dangerous Deltadist/node-r2hghss1.js

HighChild Processdist/packager-tool-9yfnj0t1.js

HighShelldist/node-r2hghss1.js

HighObfuscated Payload Loaderdist/packager-tool-t2bsmmmr.js

HighCross File Remote Execution Contextdist/node-r2hghss1.js

HighBase64 Obscured Urldist/packager-tool-9yfnj0t1.js

HighSemantic Analysis Limiteddist/packager-tool-4f38v0ry.js

MediumNetwork

MediumEnvironment Vars

MediumStructural Risk Force Deep Review

LowEvaldist/index.umd.min-drpc57vn.js

LowFilesystem

LowHigh Entropy Strings

Affected versions and remediation

This report applies to @uipath/api-workflow-tool@1.200.0.

See all versions of @uipath/api-workflow-tool for other recorded verdicts.

Review the evidence and your use of @uipath/api-workflow-tool@1.200.0 before allowing it. Restrict the permissions described in this report.
Choose an independently verified alternative or release. This report does not establish that other versions are safe.

Evidence last updated: 2026-09-22 19:15:57.784Z (UTC).

Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.

AI Security Review

Decision evidence

Source & flagged code

Source & flagged code

Findings

Affected versions and remediation

Related packages

More from @uipath

Behavioral surface

Related packages

More from @uipath

Source & flagged code