registry / @uipath/api-workflow-tool / 1.202.0

@uipath/api-workflow-tool@1.202.0

Run UiPath API Workflows locally.

AI Security Review

scanned 1mo ago · by lpm-firewall-ai

The package has no lifecycle hook or self-dependency and its inspected bundles implement explicit workflow tooling. Network and credential-related code is aligned with caller-provided publishing and authenticated UiPath operations.

Static reason

One or more suspicious static signals were detected.; previous stored version diff introduced dangerous source

Trigger

No install-time trigger is declared.

Impact

No confirmed malicious impact was established.

Mechanism

The inspected code exposes workflow packaging, publishing, authentication, and browser helper APIs; no covert execution path was found.

AI rationale

Decision evidence

public snapshot

AI called this Clean at 94.0% confidence as Benign with low false-positive risk.

Evidence for AI clean decision

The manifest defines module entrypoints and contains no lifecycle scripts or dependencies.
The Node bundle exposes project packager and publisher factories rather than executing work at import time.
Authentication requires a logged-in connection with an access token and UiPath context before workflow configuration is returned.
The packager bundle copies produced packages to a caller-selected destination.
The browser helper only exports its application-opening API.

Evidence against

Behavioral surface

Source

ChildProcessCryptoEnvironmentVarsEvalFilesystemNetworkShell

Supply chain

HighEntropyStringsUrlStrings

Manifest

NoLicense

scanned 15 file(s), 3.25 MB of source, external domains: alpha.uipath.com, cloud.uipath.com, github.com, govcloud.uipath.us, json-schema.org, momentjs.com, npm.pkg.github.com, purl.org, raw.githubusercontent.com, schemas.microsoft.com, schemas.openxmlformats.org, serverlessworkflow.io, uipath.com, www.w3.org

Source & flagged code

8 flagged

dist/node-wrbrw7qd.jsView file

Lines 8-48javascript

8 ProjectTypes,

9 TargetFramework,

10 TemporaryStorageService,

11 ToolErrorCodes,

12 ToolResult,

13 ZipService,

14 toolsFactoryRepository,

15 translate

16} from "./packager-tool-4vt21dnn.js";

17import"./packager-tool-1de529jm.js";

19// ../packager/project-packager/dist/node.js

20import { createRequire } from "node:module";

21import fs7 from "node:fs";

22import fs22 from "node:fs";

23import process22 from "node:process";

24import os3 from "node:os";

25import fs32 from "node:fs";

26import process32 from "node:process";

27import { Buffer as Buffer22 } from "node:buffer";

28import { promisify as promisify7 } from "node:util";

29import childProcess4 from "node:child_process";

30import { promisify as promisify22 } from "node:util";

High

Child Process

Package source references child process execution.

dist/node-wrbrw7qd.jsView on unpkg · L28

31import childProcess22 from "node:child_process";

32import fs42, { constants as fsConstants3 } from "node:fs/promises";

33import { promisify as promisify32 } from "node:util";

34import process42 from "node:process";

35import { execFile as execFile32 } from "node:child_process";

36import process52 from "node:process";

37import { promisify as promisify42 } from "node:util";

38import { execFile as execFile42, execFileSync as execFileSync2 } from "node:child_process";

39import { promisify as promisify52 } from "node:util";

40import { execFile as execFile52 } from "node:child_process";

41import { promisify as promisify62 } from "node:util";

42import process62 from "node:process";

43import { execFile as execFile62 } from "node:child_process";

44import process72 from "node:process";

45import process82 from "node:process";

46import path3 from "node:path";

47import { fileURLToPath as fileURLToPath2 } from "node:url";

48import childProcess32 from "node:child_process";

Lines 154-194javascript

154 if (isInsideContainer()) {

155 return false;

156 }

157 return true;

158 }

159 try {

160 if (fs3.readFileSync

Lines 11422-11462javascript

11422}

11423function invocationElapsedMs() {

11424 return performance.now() - getState().baseline;

11425}

11426function markCommandStart() {

11427 if (!timingsEnabled

dist/packager-tool-928rptcq.jsView file

9class CommanderError extends Error { L10: constructor(exitCode, code, message) { L11: super(message); ... L727: var EventEmitter = __require("node:events").EventEmitter; L728: var childProcess = __require("node:child_process"); L729: var path = __require("node:path"); ... L773: this._outputConfiguration = { L774: writeOut: (str) => process2.stdout.write(str), L775: writeErr: (str) => process2.stderr.write(str), ... L2392: FAILED_SCRIPT: "error.script.failed", L2393: FAILED_CONVERT_BASE64_TO_FILE: "error.convert.from_base64_failed", L2394: INVALID_CONVERT_FILE_INPUT: "error.convert.invalid_file_input",

High

Obfuscated Payload Loader

Source contains an obfuscated payload loader that reconstructs and executes hidden code.

dist/packager-tool-928rptcq.jsView on unpkg · L9

7621const paramValues = paramNames.map((name) => args?.[name]); L7622: const scriptFn = new Function(...paramNames, ...Object.keys(sandbox), `return (async function() { L7623: ${finalScript}

Low

Eval

Package source references a known benign dynamic code generation pattern.

dist/packager-tool-928rptcq.jsView on unpkg · L7621

dist/index-jqd5fm0v.jsView file

Lines 1286-1326javascript

1286I18nManager.registerTranslations("ja", ja_default);

1287I18nManager.registerTranslations("ko", ko_default);

1288I18nManager.registerTranslations("pt", pt_default);

1289I18nManager.registerTranslations("pt-BR", pt_BR_default);

1290I18nManager.

dist/index-sby22td6.jsView file

•matchType = previous_version_dangerous_delta matchedPackage = @uipath/api-workflow-tool@1.201.0 matchedIdentity = npm:[redacted]:1.201.0 similarity = 0.400 summary = stored previous version shares package body but lacks this dangerous source file

Critical

Previous Version Dangerous Delta

This package version adds a dangerous source file absent from the previous stored version; route for source-aware review.

dist/index-sby22td6.jsView on unpkg

•stage = ast_semantic_analysis; reason = ast_alias_growth_limit_exceeded; limitedFiles = 1

High

Semantic Analysis Limited

A bounded semantic-analysis stage reached its safety limit; remaining detectors completed, but this package requires AI review.

dist/index-sby22td6.jsView on unpkg

Source & flagged code

8 flagged · loading source

dist/node-wrbrw7qd.jsView file

28import { promisify as promisify7 } from "node:util"; L29: import childProcess4 from "node:child_process"; L30: import { promisify as promisify22 } from "node:util";

High

Child Process

Package source references child process execution.

dist/node-wrbrw7qd.jsView on unpkg · L28

174var execFile; L175: var powerShellPath = () => `${process3.env.SYSTEMROOT || process3.env.windir || String.raw`C:\Windows`}\\System32\\WindowsPowerShell\\v1.0\\powershell.exe`; L176: var executePowerShell = async (command, options = {}) => {

High

Shell

Package source references shell execution.

dist/node-wrbrw7qd.jsView on unpkg · L174

11442var telemetryInstanceSlot = singleton("TelemetryService"); L11443: var DEFAULT_AI_CONNECTION_STRING = atob("[redacted]... L11444: function getGlobalTelemetryInstance() {

High

Base64 Obscured Url

Source decodes a Base64-obscured HTTP endpoint at runtime.

dist/node-wrbrw7qd.jsView on unpkg · L11442

Findings

1 Critical6 High3 Medium5 Low

CriticalPrevious Version Dangerous Deltadist/index-sby22td6.js

HighChild Processdist/node-wrbrw7qd.js

HighShelldist/node-wrbrw7qd.js

HighObfuscated Payload Loaderdist/packager-tool-928rptcq.js

HighCross File Remote Execution Contextdist/index-jqd5fm0v.js

HighBase64 Obscured Urldist/node-wrbrw7qd.js

HighSemantic Analysis Limiteddist/index-sby22td6.js

MediumNetwork

MediumEnvironment Vars

MediumStructural Risk Force Deep Review

LowEvaldist/packager-tool-928rptcq.js

LowFilesystem

LowHigh Entropy Strings

Affected versions and remediation

This report applies to @uipath/api-workflow-tool@1.202.0.

See all versions of @uipath/api-workflow-tool for other recorded verdicts.

Review the evidence and your use of @uipath/api-workflow-tool@1.202.0 before allowing it. Restrict the permissions described in this report.
Choose an independently verified alternative or release. This report does not establish that other versions are safe.

Evidence last updated: 2026-09-22 19:16:06.642Z (UTC).

Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.

AI Security Review

Decision evidence

Source & flagged code

Source & flagged code

Findings

Affected versions and remediation

Related packages

More from @uipath

Behavioral surface

Related packages

More from @uipath

Source & flagged code