registry / @uipath/api-workflow-tool / 1.202.1

@uipath/api-workflow-tool@1.202.1

Run UiPath API Workflows locally.

AI Security Review

scanned 1mo ago · by lpm-firewall-ai

Inspection shows a UiPath local workflow CLI with no install hooks, no agent-surface writes, and process or network use limited to packaging and the configured UiPath service. Those behaviors match the stated product and do not form a concrete attack.

Static reason

One or more suspicious static signals were detected.; previous stored version diff introduced dangerous source

Trigger

User runs the CLI after install; package.json defines no lifecycle scripts.

Impact

No unconsented mutation, exfiltration, or remote code execution was established.

Mechanism

Command registration loads bundled packager and auth code that call local tools and the configured UiPath API.

AI rationale

Network endpoints1

cloud.uipath.com

Decision evidence

public snapshot

AI called this Clean at 86.0% confidence as Benign with low false-positive risk.

Evidence for AI clean decision

package.json has no scripts, bin, or dependencies; main and exports point at the local workflow CLI under dist.
dist/node-ahdpcmnm.js runs a fixed execSync of dotnet --version only to detect the local SDK.
dist/packager-tool-bbc3332a.js defaults the service base URL to https://cloud.uipath.com and the auth home to .uipath.
dist/index-5rwqj9ef.js is a bundled project packager that imports node:child_process for local tooling.
dist/index-sby22td6.js vendors the open helper and detects WSL from local filesystem markers.

Evidence against

No preinstall, install, or postinstall hook and no agent config or foreign control-surface writes.
No credential harvest, remote payload fetch, or self-dependency install chain.

Behavioral surface

Source

ChildProcessCryptoEnvironmentVarsEvalFilesystemNetworkShell

Supply chain

HighEntropyStringsUrlStrings

Source & flagged code

8 flagged

dist/node-ahdpcmnm.jsView file

Lines 8-48javascript

8 ProjectTypes,

9 TargetFramework,

10 TemporaryStorageService,

11 ToolErrorCodes,

12 ToolResult,

13 ZipService,

14 toolsFactoryRepository,

15 translate

16} from "./packager-tool-4vt21dnn.js";

17import"./packager-tool-1de529jm.js";

19// ../packager/project-packager/dist/node.js

20import { createRequire } from "node:module";

21import fs7 from "node:fs";

22import fs22 from "node:fs";

23import process22 from "node:process";

24import os3 from "node:os";

25import fs32 from "node:fs";

26import process32 from "node:process";

27import { Buffer as Buffer22 } from "node:buffer";

28import { promisify as promisify7 } from "node:util";

29import childProcess4 from "node:child_process";

30import { promisify as promisify22 } from "node:util";

High

Child Process

Package source references child process execution.

dist/node-ahdpcmnm.jsView on unpkg · L28

31import childProcess22 from "node:child_process";

32import fs42, { constants as fsConstants3 } from "node:fs/promises";

33import { promisify as promisify32 } from "node:util";

34import process42 from "node:process";

35import { execFile as execFile32 } from "node:child_process";

36import process52 from "node:process";

37import { promisify as promisify42 } from "node:util";

38import { execFile as execFile42, execFileSync as execFileSync2 } from "node:child_process";

39import { promisify as promisify52 } from "node:util";

40import { execFile as execFile52 } from "node:child_process";

41import { promisify as promisify62 } from "node:util";

42import process62 from "node:process";

43import { execFile as execFile62 } from "node:child_process";

44import process72 from "node:process";

45import process82 from "node:process";

46import path3 from "node:path";

47import { fileURLToPath as fileURLToPath2 } from "node:url";

48import childProcess32 from "node:child_process";

Lines 154-194javascript

154 if (isInsideContainer()) {

155 return false;

156 }

157 return true;

158 }

159 try {

160 if (fs3.readFileSync

Lines 11422-11462javascript

11422}

11423function invocationElapsedMs() {

11424 return performance.now() - getState().baseline;

11425}

11426function markCommandStart() {

11427 if (!timingsEnabled

dist/packager-tool-bbc3332a.jsView file

9class CommanderError extends Error { L10: constructor(exitCode, code, message) { L11: super(message); ... L727: var EventEmitter = __require("node:events").EventEmitter; L728: var childProcess = __require("node:child_process"); L729: var path = __require("node:path"); ... L773: this._outputConfiguration = { L774: writeOut: (str) => process2.stdout.write(str), L775: writeErr: (str) => process2.stderr.write(str), ... L2289: FAILED_SCRIPT: "error.script.failed", L2290: FAILED_CONVERT_BASE64_TO_FILE: "error.convert.from_base64_failed", L2291: INVALID_CONVERT_FILE_INPUT: "error.convert.invalid_file_input",

High

Obfuscated Payload Loader

Source contains an obfuscated payload loader that reconstructs and executes hidden code.

dist/packager-tool-bbc3332a.jsView on unpkg · L9

7518const paramValues = paramNames.map((name) => args?.[name]); L7519: const scriptFn = new Function(...paramNames, ...Object.keys(sandbox), `return (async function() { L7520: ${finalScript}

Low

Eval

Package source references a known benign dynamic code generation pattern.

dist/packager-tool-bbc3332a.jsView on unpkg · L7518

dist/index-5rwqj9ef.jsView file

Lines 1286-1326javascript

1286I18nManager.registerTranslations("ja", ja_default);

1287I18nManager.registerTranslations("ko", ko_default);

1288I18nManager.registerTranslations("pt", pt_default);

1289I18nManager.registerTranslations("pt-BR", pt_BR_default);

1290I18nManager.

dist/index-sby22td6.jsView file

•matchType = previous_version_dangerous_delta matchedPackage = @uipath/api-workflow-tool@1.201.0 matchedIdentity = npm:[redacted]:1.201.0 similarity = 0.400 summary = stored previous version shares package body but lacks this dangerous source file

Critical

Previous Version Dangerous Delta

This package version adds a dangerous source file absent from the previous stored version; route for source-aware review.

dist/index-sby22td6.jsView on unpkg

•stage = ast_semantic_analysis; reason = ast_alias_growth_limit_exceeded; limitedFiles = 1

High

Semantic Analysis Limited

A bounded semantic-analysis stage reached its safety limit; remaining detectors completed, but this package requires AI review.

dist/index-sby22td6.jsView on unpkg

Source & flagged code

8 flagged · loading source

dist/node-ahdpcmnm.jsView file

28import { promisify as promisify7 } from "node:util"; L29: import childProcess4 from "node:child_process"; L30: import { promisify as promisify22 } from "node:util";

High

Child Process

Package source references child process execution.

dist/node-ahdpcmnm.jsView on unpkg · L28

174var execFile; L175: var powerShellPath = () => `${process3.env.SYSTEMROOT || process3.env.windir || String.raw`C:\Windows`}\\System32\\WindowsPowerShell\\v1.0\\powershell.exe`; L176: var executePowerShell = async (command, options = {}) => {

High

Shell

Package source references shell execution.

dist/node-ahdpcmnm.jsView on unpkg · L174

11442var telemetryInstanceSlot = singleton("TelemetryService"); L11443: var DEFAULT_AI_CONNECTION_STRING = atob("[redacted]... L11444: function getGlobalTelemetryInstance() {

High

Base64 Obscured Url

Source decodes a Base64-obscured HTTP endpoint at runtime.

dist/node-ahdpcmnm.jsView on unpkg · L11442

Findings

1 Critical6 High3 Medium5 Low

CriticalPrevious Version Dangerous Deltadist/index-sby22td6.js

HighChild Processdist/node-ahdpcmnm.js

HighShelldist/node-ahdpcmnm.js

HighObfuscated Payload Loaderdist/packager-tool-bbc3332a.js

HighCross File Remote Execution Contextdist/index-5rwqj9ef.js

HighBase64 Obscured Urldist/node-ahdpcmnm.js

HighSemantic Analysis Limiteddist/index-sby22td6.js

MediumNetwork

MediumEnvironment Vars

MediumStructural Risk Force Deep Review

LowEvaldist/packager-tool-bbc3332a.js

LowFilesystem

LowHigh Entropy Strings

Affected versions and remediation

This report applies to @uipath/api-workflow-tool@1.202.1.

See all versions of @uipath/api-workflow-tool for other recorded verdicts.

Review the evidence and your use of @uipath/api-workflow-tool@1.202.1 before allowing it. Restrict the permissions described in this report.
Choose an independently verified alternative or release. This report does not establish that other versions are safe.

Evidence last updated: 2026-09-22 19:15:49.108Z (UTC).

Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.

AI Security Review

Decision evidence

Source & flagged code

Source & flagged code

Findings

Affected versions and remediation

Related packages

More from @uipath

Behavioral surface

Related packages

More from @uipath

Source & flagged code