registry / @uipath/cli / 1.204.0
@uipath/cli@1.204.0
⚠ Under reviewCross platform CLI for UiPath
AI Security Review
scanned 4d ago · by lpm-firewall-aiInspection found no lifecycle hook and the reviewed runtime locations showed CLI completion behavior, without establishing credential disclosure or unrelated account actions. A bundle's semantic analysis was incomplete, so the package cannot be cleared or assigned a concrete attack verdict from the inspected evidence.
Static reason
One or more suspicious static signals were detected.; previous stored version diff introduced dangerous source
Trigger
Unresolved behavior may be activated through CLI runtime paths.
Impact
The available source evidence does not determine whether the unresolved behavior creates an attack surface.
Mechanism
The inspected runtime excerpts concern CLI completion and configuration paths; the remaining bundle behavior could not be fully assessed.
AI rationale
Inspection found no lifecycle hook and the reviewed runtime locations showed CLI completion behavior, without establishing credential disclosure or unrelated account actions. A bundle's semantic analysis was incomplete, so the package cannot be cleared or assigned a concrete attack verdict from the inspected evidence.
Decision evidence
public snapshotAI called this Manual Review at 63.0% confidence as Unknown with medium false-positive risk.
AI review observations
- The manifest exposes a CLI entry point and contains no lifecycle scripts.
- The flagged runtime operations build command completion data and identify shell completion paths; the completion command is registered in the CLI.
- The reviewed Claude integration resolves a Claude configuration directory and launches the Claude CLI.
- The semantic analysis of one bundle did not complete, leaving relevant package behavior unresolved.
Evidence against
- The inspected runtime locations do not establish unrelated automatic account actions or credential disclosure.
Behavioral surface
ChildProcessCryptoDynamicRequireEnvironmentVarsEvalFilesystemNativeBindingsNetworkShell
HighEntropyStringsUrlStrings
NoLicense
Source & flagged code
13 flagged · loading sourcedist/applicationinsights-s28k1t0d.jsView file
11246exports.execAsync = undefined;
L11247: var child_process = __require("child_process");
L11248: var util = __require("util");
High
Child Process
Package source references child process execution.
dist/applicationinsights-s28k1t0d.jsView on unpkg · L11246410this._logToConsole = true;
L411: var logDestination = process.env.APPLICATIONINSIGHTS_LOG_DESTINATION;
L412: if (logDestination == "file+console") {
...
L428: } else {
L429: this._tempDir = path.join(process.cwd(), logFilePath);
L430: }
...
L748: try {
L749: var jsonConfig = JSON.parse(jsonString);
L750: if (jsonConfig.disableStatsbeat != null) {
...
L2650: try {
L2651: moduleVersion = originalRequire.call(this, path.join(moduleId, "package.json")).version;
L2652: } catch (e) {
High
Command Output Exfiltration
Source combines command execution, command-output handling, and outbound requests; review data flow before blocking.
dist/applicationinsights-s28k1t0d.jsView on unpkg · L410410this._logToConsole = true;
L411: var logDestination = process.env.APPLICATIONINSIGHTS_LOG_DESTINATION;
L412: if (logDestination == "file+console") {
...
L428: } else {
L429: this._tempDir = path.join(process.cwd(), logFilePath);
L430: }
...
L748: try {
L749: var jsonConfig = JSON.parse(jsonString);
L750: if (jsonConfig.disableStatsbeat != null) {
...
L2650: try {
L2651: moduleVersion = originalRequire.call(this, path.join(moduleId, "package.json")).version;
L2652: } catch (e) {
Findings
1 Critical9 High4 Medium6 Low
CriticalPrevious Version Dangerous Deltadist/index-vqv4011a.js
HighChild Processdist/applicationinsights-s28k1t0d.js
HighShelldist/index-1xqtdfjh.js
HighCredential Redirect Persistencedist/index-vqv4011a.js
HighCommand Output Exfiltrationdist/applicationinsights-s28k1t0d.js
HighSandbox Evasion Gated Capabilitydist/index-1xqtdfjh.js
HighCloud Metadata Accessdist/applicationinsights-s28k1t0d.js
HighCross File Remote Execution Contextdist/index-trd07rnv.js
HighBase64 Obscured Urldist/index-vqv4011a.js
HighSemantic Analysis Limiteddist/index-h8cph72k.js
MediumDynamic Requiredist/index-469jgr1w.js
Affected versions and remediation
This report applies to @uipath/cli@1.204.0.
See all versions of @uipath/cli for other recorded verdicts.
- Review the evidence and your use of @uipath/cli@1.204.0 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.