registry / @uipath/codedagent-tool / 1.203.0

@uipath/codedagent-tool@1.203.0

Build, run, deploy, and manage AI Agents.

AI Security Review

scanned 12d ago · by lpm-firewall-ai

Source inspection found ordinary UiPath CLI and authentication behavior, with no install lifecycle hooks or concrete malicious behavior. The scanner’s base64 signal corresponds to JWT decoding, and the launcher’s process creation is part of application opening.

Static reason

One or more suspicious static signals were detected.; previous stored version diff introduced dangerous source

Trigger

The CLI or launcher is invoked by a user.

Impact

No confirmed unauthorized credential exposure, persistence, destructive action, or other attack surface was established.

Mechanism

Authentication code parses JWT claims and validates the authority URL; CLI code dispatches commands and the launcher starts a selected target.

AI rationale

Network endpoints1

cloud.uipath.com

Decision evidence

public snapshot

AI called this Clean at 94.0% confidence as Benign with low false-positive risk.

Evidence for AI clean decision

package.json exposes the library and CLI entrypoints; no lifecycle hooks are declared.
The authentication code validates authority URLs and uses JWT decoding for token handling.
The CLI dispatches named UiPath commands; the companion launcher starts a selected application target.

Evidence against

Behavioral surface

Source

ChildProcessCryptoEnvironmentVarsFilesystemNetwork

Supply chain

HighEntropyStringsUrlStrings

Manifest

NoLicense

scanned 9 file(s), 544 KB of source, external domains: cloud.uipath.com, github.com, govcloud.uipath.us, npm.pkg.github.com, www.python.org

Source & flagged code

6 flagged

dist/tool-tfmtkjk7.jsView file

Lines 3938-3978javascript

3938 }

3939 getState().commandStart = performance.now();

3940}

3941function recordCommandDuration(durationMs) {

3942 if (!timingsEnabled()) {

3943 return;

3944 }

3945 getState().commandMs = durationMs;

3946}

3947// ../common/src/telemetry/proxy-http-agent.ts

3948var slot = singleton("ProxyAuthHttpsAgent");

3949

3950// ../common/src/telemetry/node-appinsights-telemetry-provider.ts

3951var providerSlot = singleton("TelemetryProvider");

3952

3953// ../common/src/telemetry/telemetry-spool.ts

3954var sidecarEntrySlot = singleton("TelemetrySidecarEntry");

3955var MAX_SPOOL_AGE_MS = 72 * 60 * 60 * 1000;

3956

3957// ../common/src/telemetry/telemetry-init.ts

3958var telemetryInstanceSlot = singleton("TelemetryService");

3959var DEFAULT_AI_CONNECTION_STRING = atob("SW5zdHJ1bWVudGF0aW9uS2V5PTliZDM3NDgyLTgxMGUtNDQyYS1hYWE2LWQzOGVmNjVjNjY3NDtJbmdlc3Rpb25FbmRwb2ludD1odHRwczovL3dlc3RldXJvcGUtNS5pbi5hcHBsaWNhdGlvbmluc2lnaHRzLmF6dXJlLmNvbS87TGl2ZUVuZHBvaW50PWh0dHBzOi8vd2VzdGV1cm9wZS5saXZlZGlhZ25vc3RpY3MubW9uaXRvci5henVyZS5jb20vO0FwcGxpY2F0aW9uSWQ9MzU2OTdlZjEtOGJkMC00ZjE5LWEyN2MtZDg3Y2NhYzY2ZDJj");

3960function getGlobalTelemetryInstance() {

High

Base64 Obscured Url

Source decodes a Base64-obscured HTTP endpoint at runtime.

dist/tool-tfmtkjk7.jsView on unpkg · L3958

3961 const existing = telemetryInstanceSlot.get();

3962 if (existing && typeof existing === "object" && "trackEvent" in existing && typeof existing.trackEvent === "function") {

3963 return existing;

3964 }

3965 return;

3966}

3967function setGlobalTelemetryInstance(instance) {

3968 telemetryInstanceSlot.set(instance);

3969}

3970var _localTelemetryInstance;

3971function getTelemetryInstance() {

3972 const global = getGlobalTelemetryInstance();

3973 if (global)

3974 return global;

3975 if (!_localTelemetryInstance) {

3976 _localTelemetryInstance = new TelemetryService(new LoggerTelemetryProvider, new NodeContextStorage);

3977 setGlobalTelemetryInstance(_localTelemetryInstance);

3978 }

Lines 5854-5894javascript

5854` + `You can specify the URL via:

5855` + ` • --authority flag

5856` + ` • UIPATH_URL environment variable

5857` + ` • auth.authority in config file`);

5858 this.url = url;

5859 this.reason = reason;

5860

dist/index-sby22td6.jsView file

Lines 478-518javascript

478 if (app) {

479 command = app;

480 } else {

481 const isBundled = !__dirname2 || __dirname2 === "/";

dist/tool-51xp8k9r.jsView file

•matchType = previous_version_dangerous_delta matchedPackage = @uipath/codedagent-tool@1.202.1 matchedIdentity = npm:QHVpcGF0aC9jb2RlZGFnZW50LXRvb2w:1.202.1 similarity = 0.900 summary = stored previous version shares package body but lacks this dangerous source file

High

Previous Version Dangerous Delta

This package version adds a dangerous source file absent from the previous stored version; route for source-aware review.

dist/tool-51xp8k9r.jsView on unpkg

package.jsonView file

Lines 1-32json

2 "name": "@uipath/codedagent-tool",

3 "author": "UiPath",

4 "license": "SEE LICENSE IN LICENSE.txt",

5 "version": "1.203.0",

Source & flagged code

6 flagged · loading source

dist/tool-tfmtkjk7.jsView file

3958var telemetryInstanceSlot = singleton("TelemetryService"); L3959: var DEFAULT_AI_CONNECTION_STRING = atob("[redacted]... L3960: function getGlobalTelemetryInstance() {

High

Base64 Obscured Url

Source decodes a Base64-obscured HTTP endpoint at runtime.

dist/tool-tfmtkjk7.jsView on unpkg · L3958

5874const hasScheme = /^[a-z][a-z0-9+.-]*:\/\//i.test(baseUrl); const [hostCandidate] = baseUrl.split(/[/?#]/, 1); if (!hasScheme && hostCandidate.includes(".")) { baseUrl = `https:/

Medium

Stripped Provenance Metadata

The authentication code validates authority URLs and uses JWT decoding for token handling.

dist/tool-tfmtkjk7.jsView on unpkg · L5874

dist/index-sby22td6.jsView file

•stage = ast_semantic_analysis; reason = ast_alias_growth_limit_exceeded; limitedFiles = 1

High

Findings

3 High3 Medium6 Low

HighBase64 Obscured Urldist/tool-tfmtkjk7.js

HighSemantic Analysis Limiteddist/index-sby22td6.js

HighPrevious Version Dangerous Deltadist/tool-51xp8k9r.js

MediumNetwork

MediumEnvironment Vars

MediumStripped Provenance Metadatadist/tool-tfmtkjk7.js

LowFilesystem

LowHigh Entropy Strings

LowUrl Strings

LowNo License

LowSuspicious Lifecycle Evidencepackage.json

LowAi Review Evidencedist/index-sby22td6.js

Affected versions and remediation

This report applies to @uipath/codedagent-tool@1.203.0.

See all versions of @uipath/codedagent-tool for other recorded verdicts.

Review the evidence and your use of @uipath/codedagent-tool@1.203.0 before allowing it. Restrict the permissions described in this report.
Choose an independently verified alternative or release. This report does not establish that other versions are safe.

Evidence last updated: 2026-10-11 18:24:20.554Z (UTC).

Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.

AI Security Review

Decision evidence

Source & flagged code

Source & flagged code

Findings

Affected versions and remediation

Related packages

More from @uipath

Behavioral surface

Related packages

More from @uipath

Source & flagged code