registry / @uipath/api-workflow-tool / 1.203.0
@uipath/api-workflow-tool@1.203.0
Run UiPath API Workflows locally.
AI Security Review
scanned 12d ago · by lpm-firewall-aiStatic indicators were consistent with the package’s workflow and packaging functions in the inspected excerpts. No concrete attack behavior or install-time trigger was found, so the package is clean.
Static reason
One or more suspicious static signals were detected.; previous stored version diff introduced dangerous source
Trigger
Users invoke the workflow or packaging tools, or authentication code processes a supplied token.
Impact
No unauthorized data access, exfiltration, persistence, or destructive behavior was established.
Mechanism
The inspected code validates the configured HTTPS authority, parses JWT claims, and invokes dotnet for NuGet package signing with shell execution disabled.
AI rationale
Static indicators were consistent with the package’s workflow and packaging functions in the inspected excerpts. No concrete attack behavior or install-time trigger was found, so the package is clean.
Evidence
package.jsondist/packager-tool-csg2tez0.jsdist/node-wrrsdgh5.jsdist/index-y5gpcmas.jsdist/index-sby22td6.js
Network endpoints1
cloud.uipath.com
Decision evidence
public snapshotAI called this Clean at 91.0% confidence as Benign with low false-positive risk.
Evidence for AI clean decision
- package.json identifies a UiPath API workflow tool and exposes bundled dist entrypoints; it contains no lifecycle scripts.
- The flagged packager bundle validates an HTTPS authority URL and parses JWT claims for authentication.
- The flagged node bundle launches dotnet with shell disabled to sign caller-selected NuGet packages.
- The other flagged bundles contain ordinary command-line parsing and browser-detection code; inspected excerpts show no attack behavior.
Evidence against
Behavioral surface
ChildProcessCryptoEnvironmentVarsEvalFilesystemNetworkShell
HighEntropyStringsUrlStrings
NoLicense
Source & flagged code
8 flagged · loading sourcedist/packager-tool-csg2tez0.jsView file
727var EventEmitter = __require("node:events").EventEmitter;
L728: var childProcess = __require("node:child_process");
L729: var path = __require("node:path");
High
Child Process
Package source references child process execution.
dist/packager-tool-csg2tez0.jsView on unpkg · L7279class CommanderError extends Error {
L10: constructor(exitCode, code, message) {
L11: super(message);
...
L727: var EventEmitter = __require("node:events").EventEmitter;
L728: var childProcess = __require("node:child_process");
L729: var path = __require("node:path");
...
L773: this._outputConfiguration = {
L774: writeOut: (str) => process2.stdout.write(str),
L775: writeErr: (str) => process2.stderr.write(str),
...
L2289: FAILED_SCRIPT: "error.script.failed",
L2290: FAILED_CONVERT_BASE64_TO_FILE: "error.convert.from_base64_failed",
L2291: INVALID_CONVERT_FILE_INPUT: "error.convert.invalid_file_input",
High
Obfuscated Payload Loader
Source contains an obfuscated payload loader that reconstructs and executes hidden code.
dist/packager-tool-csg2tez0.jsView on unpkg · L929471var telemetryInstanceSlot = singleton("TelemetryService");
L29472: var DEFAULT_AI_CONNECTION_STRING = atob("[redacted]...
L29473: function getGlobalTelemetryInstance() {
Findings
1 Critical6 High3 Medium5 Low
CriticalPrevious Version Dangerous Deltadist/index-y5gpcmas.js
HighChild Processdist/packager-tool-csg2tez0.js
HighShelldist/node-wrrsdgh5.js
HighObfuscated Payload Loaderdist/packager-tool-csg2tez0.js
HighCross File Remote Execution Contextdist/index-y5gpcmas.js
HighBase64 Obscured Urldist/packager-tool-csg2tez0.js
HighSemantic Analysis Limiteddist/index-sby22td6.js
MediumNetwork
MediumEnvironment Vars
MediumStructural Risk Force Deep Review
LowEvaldist/packager-tool-csg2tez0.js
LowFilesystem
LowHigh Entropy Strings
Affected versions and remediation
This report applies to @uipath/api-workflow-tool@1.203.0.
See all versions of @uipath/api-workflow-tool for other recorded verdicts.
- Review the evidence and your use of @uipath/api-workflow-tool@1.203.0 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.