registry / @uipath/case-tool / 1.204.0

@uipath/case-tool@1.204.0

Manage Case Management instances, processes, and incidents.

AI Security Review

scanned 4d ago · by lpm-firewall-ai

Source inspection found no lifecycle hooks or confirmed malicious runtime behavior. The scanner signals correspond to bundled code generation, delegated CLI functionality, and UiPath service operations; the default telemetry string alone does not establish an attack.

Static reason

One or more suspicious static signals were detected.; previous stored version diff introduced dangerous source

Trigger

A user invokes the CLI or an exported package function.

Impact

The inspected behavior is consistent with the package’s declared case management purpose; no malicious action was established.

Mechanism

The CLI registers commands, can delegate authoring commands to the locally resolved UiPath builder SDK, and the bundled client makes authenticated requests using a supplied base URL.

AI rationale

Decision evidence

public snapshot

AI called this Clean at 79.0% confidence as Benign with low false-positive risk.

Evidence for AI clean decision

The manifest points to a CLI and library entrypoint and defines no lifecycle scripts.
The added authoring module resolves the UiPath Maestro builder SDK and delegates requested commands to it.
The large bundle uses a supplied base URL and bearer token for UiPath Orchestrator requests.
The telemetry bundle contains a default Application Insights connection string; inspected source did not establish unrelated credential disclosure or another attack.

Evidence against

The CLI entrypoint registers and parses commands when invoked; package import alone does not show an install-time action.
The dynamic function construction occurs in bundled application code, with no inspected evidence of attacker-controlled code execution.

Behavioral surface

Source

ChildProcessCryptoEnvironmentVarsEvalFilesystemNetworkShell

Supply chain

HighEntropyStringsMinified

Source & flagged code

6 flagged

dist/index.umd.min-fqefd9kn.jsView file

Lines 1814-1854javascript

1814 constructor(e2) {

1815 var t2;

1816 let n2;

1817 this.refs = {}, this.dynamicAnchors = {}, typeof e2.schema == "object" && (n2 = e2.schema), this.schema = e2.schema, this.schemaId = e2.schemaId, this.root = e2.root || this, this.baseId = (t2 = e2.baseId) !== null && t2 !== undefined ? t2 : (0, Ze.normalizeId)(n2 == null ? undefined : n2[e2.schemaId || "$id"]), this.schemaPath = e2.schemaPath, this.localRefs = e2.localRefs, this.meta = e2.meta, this.$async = n2 == null ? undefined : n2.$async, this.refs = {};

1818 }

1819 }

1820 function et(e2) {

1821 const t2 = nt.call(this, e2);

1822 if (t2)

1823 return t2;

1824 const n2 = (0, Ze.getFullPath)(this.opts.uriResolver, e2.root.baseId), { es5: r2, lines: o2 } = this.opts.code, { ownProperties: i2 } = this.opts, a2 =

1825 let s2;

1826 e2.$async && (s2 = a2.scopeValue("Error", { ref: Ke.default, code: He._`require("ajv/dist/runtime/validation_error").default` }));

1827 const l2 = a2.scopeName("validate");

1828 e2.validateName = l2;

1829 const c2 = { gen: a2, allErrors: this.opts.allErrors, data: Je.default.data, parentData: Je.default.parentData, parentDataProperty: Je.default.parentDataProperty, dataNames: [Je.default.data], dataPathArr: [He.nil], dataLevel: 0, dataTypes: [], definedProperties: new Set, topSchemaRef: a2.scopeValue("schema", this.opts.code.source === true ? { ref: e2.schema, code: (0, He.stringify)(e2.schema) } : { ref: e2.schema }), validateName: l2, ValidationError: s2, schema: e2.schema, schemaEnv: e2, rootId: n2, baseId: e2.baseId ||

1830 let u2;

1831 try {

1832 this._compilations.add(e2), (0, Qe.validateFunctionCode)(c2), a2.optimize(this.opts.code.optimize);

1833 const t3 = a2.toString();

1834 u2 = `${a2.scopeRefs(Je.default.scope)}return ${t3}`, this.opts.code.process && (u2 = this.opts.code.process(u2, e2));

1835 const n3 = new Function(`${Je.default.self}`, `${Je.default.scope}`, u2)(this, this.scope.get());

1836 if (this.scope.value(l2, { ref: n3 }), n3.errors = null, n3.schema = e2.schema, n3.schemaEnv = e2, e2.$async && (n3.$async = true), this.opts.code.source === true && (n3.source = { validateName: l2, validateCode: t3, scopeValues: a2._values }), this.opts.unevaluated) {

Low

Eval

Package source references a known benign dynamic code generation pattern.

dist/index.umd.min-fqefd9kn.js

1837 const { props: e3, items: t4 } = c2;

1838 n3.evaluated = { props: e3 instanceof He.Name ? undefined : e3, items: t4 instanceof He.Name ? undefined : t4, dynamicProps: e3 instanceof He.Name, dynamicItems: t4 instanceof

1839 }

1840 return e2.validate = n3, e2;

1841 } catch (t3) {

1842 throw delete e2.validate, delete e2.validateName, u2 && this.logger.error("Error compiling schema, function code:", u2), t3;

1843 } finally {

1844 this._compilations.delete(e2);

1845 }

1846 }

1847 function tt(e2) {

1848 return (0, Ze.inlineRef)(e2.schema, this.opts.inlineRefs) ? e2.schema : e2.validate ? e2 : et.call(this, e2);

1849 }

1850 function nt(e2) {

1851 for (const r2 of this._compilations)

1852 if (n2 = e2, (t2 = r2).schema === n2.schema && t2.root === n2.root && t2.baseId === n2.baseId)

1853 return r2;

1854 var t2, n2;

Long lines were clipped for display.

dist/packager-tool-3q3d1hk8.jsView file

Lines 3919-3959javascript

3919 }

3920 getState().commandStart = performance.now();

3921}

3922function recordCommandDuration(durationMs) {

3923 if (!timingsEnabled()) {

dist/index-h8cph72k.jsView file

•stage = ast_semantic_analysis; reason = ast_alias_growth_limit_exceeded; limitedFiles = 2

High

Semantic Analysis Limited

A bounded semantic-analysis stage reached its safety limit; remaining detectors completed, but this package requires AI review.

dist/index-h8cph72k.jsView on unpkg

dist/authoring-6ckkzfc9.jsView file

•matchType = previous_version_dangerous_delta matchedPackage = @uipath/case-tool@1.203.0 matchedIdentity = npm:QHVpcGF0aC9jYXNlLXRvb2w:1.203.0 similarity = 0.654 summary = stored previous version shares package body but lacks this dangerous source file

High

Previous Version Dangerous Delta

This package version adds a dangerous source file absent from the previous stored version; route for source-aware review.

dist/authoring-6ckkzfc9.jsView on unpkg

package.jsonView file

Lines 1-33json

2 "name": "@uipath/case-tool",

3 "author": "UiPath",

4 "license": "SEE LICENSE IN LICENSE.txt",

5 "version": "1.204.0",

Source & flagged code

6 flagged · loading source

dist/index.umd.min-fqefd9kn.jsView file

1834u2 = `${a2.scopeRefs(Je.default.scope)}return ${t3}`, this.opts.code.process && (u2 = this.opts.code.process(u2, e2)); L1835: const n3 = new Function(`${Je.default.self}`, `${Je.default.scope}`, u2)(this, this.scope.get()); L1836: if (this.scope.value(l2, { ref: n3 }), n3.errors = null, n3.schema = e2.schema, n3.schemaEnv = e2, e2.$async && (n3.$async = true), this.opts.code.source === true && (n3.source = {...

Low

Eval

Package source references a known benign dynamic code generation pattern.

dist/index.umd.min-fqefd9kn.jsView on unpkg · L1834

dist/packager-tool-3q3d1hk8.jsView file

3939var telemetryInstanceSlot = singleton("TelemetryService"); L3940: var DEFAULT_AI_CONNECTION_STRING = atob("[redacted]... L3941: function getGlobalTelemetryInstance() {

High

Base64 Obscured Url

Source decodes a Base64-obscured HTTP endpoint at runtime.

dist/packager-tool-3q3d1hk8.jsView on unpkg · L3939

dist/index-h8cph72k.js

Findings

3 High2 Medium7 Low

HighBase64 Obscured Urldist/packager-tool-3q3d1hk8.js

HighSemantic Analysis Limiteddist/index-h8cph72k.js

HighPrevious Version Dangerous Deltadist/authoring-6ckkzfc9.js

MediumNetwork

MediumEnvironment Vars

LowEvaldist/index.umd.min-fqefd9kn.js

LowFilesystem

LowHigh Entropy Strings

LowUrl Strings

LowNo License

LowSuspicious Lifecycle Evidencepackage.json

Affected versions and remediation

This report applies to @uipath/case-tool@1.204.0.

See all versions of @uipath/case-tool for other recorded verdicts.

Review the evidence and your use of @uipath/case-tool@1.204.0 before allowing it. Restrict the permissions described in this report.
Choose an independently verified alternative or release. This report does not establish that other versions are safe.

Evidence last updated: 2026-10-19 19:20:58.073Z (UTC).

Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.

AI Security Review

Decision evidence

Source & flagged code

Source & flagged code

Findings

Affected versions and remediation

Related packages

More from @uipath

Behavioral surface

Related packages

More from @uipath

Source & flagged code