registry / @uipath/codedapp-tool / 1.202.0
@uipath/codedapp-tool@1.202.0
Build, pack, publish, deploy, and manage UiPath Coded Web Applications.
AI Security Review
scanned 6d ago · by lpm-firewall-aiSource inspection shows package-aligned CLI authentication and API calls, with no install lifecycle command. The flagged endpoint is on alpha.uipath.com, and the inspected solution API path is derived from the authenticated UiPath account context rather than an unrelated recipient.
Static reason
High-risk behavior combination matched malicious policy.
Trigger
A user invokes a CLI command; credential loading is skipped for init.
Impact
No credential transfer to an unrelated recipient, persistence, or other attack effect was established.
Mechanism
The CLI reads the current UiPath login status and uses the token with UiPath API requests. The inspected solution API path derives from the authenticated base URL, organization, and tenant.
AI rationale
Source inspection shows package-aligned CLI authentication and API calls, with no install lifecycle command. The flagged endpoint is on alpha.uipath.com, and the inspected solution API path is derived from the authenticated UiPath account context rather than an unrelated recipient.
Network endpoints1
alpha.uipath.com
Decision evidence
public snapshotAI called this Clean at 96.0% confidence as Benign with low false-positive risk.
Evidence for AI clean decision
- package.json declares the CLI entrypoints and no install lifecycle command.
- The bundled SDK’s default API host is alpha.uipath.com; its solution API path is also built from the current authenticated base URL, organization, and tenant.
- Before a command, the CLI loads credentials only from a logged-in UiPath session; the init command skips this hook.
- A deploy lookup sends the bearer token to an endpoint built from the configured UiPath base URL and organization.
- The browser-opening helper launches the supplied target through the system opener.
Evidence against
Behavioral surface
ChildProcessCryptoEnvironmentVarsFilesystemNetworkShell
HighEntropyStringsUrlStrings
NoLicense
Source & flagged code
5 flagged · loading sourcedist/packager-tool-ma7s1htk.jsView file
33import {
L34: FormData as FormData2,
L35: fetch_blob_default,
...
L124: defaultWidth: 0,
L125: output: process.stdout,
L126: tty: __require("tty")
...
L148: }
L149: if (process.env.CLI_WIDTH) {
L150: const width = parseInt(process.env.CLI_WIDTH, 10);
...
L1446: `).split(`
L1447: `).map((line) => exec(line, columns, options)).join(`
L1448: `);
Critical
Credential Exfiltration
Source appears to send environment or credential material to an external endpoint.
dist/packager-tool-ma7s1htk.jsView on unpkg · L3333Trigger-reachable chain: manifest.main -> dist/tool.js -> dist/packager-tool-ma7s1htk.js
L33: import {
L34: FormData as FormData2,
L35: fetch_blob_default,
...
L124: defaultWidth: 0,
L125: output: process.stdout,
L126: tty: __require("tty")
...
L148: }
L149: if (process.env.CLI_WIDTH) {
L150: const width = parseInt(process.env.CLI_WIDTH, 10);
...
L1446: `).split(`
L1447: `).map((line) => exec(line, columns, options)).join(`
L1448: `);
Critical
Trigger Reachable Dangerous Capability
A package entrypoint or install-time lifecycle script reaches a source file with blocking dangerous behavior.
dist/packager-tool-ma7s1htk.jsView on unpkg · L33•Manifest-reachable source captures an API credential, sends it to a fixed unofficial gateway, and persists that redirection in agent or shell configuration.
dist/packager-tool-ma7s1htk.js:
function readline() {
const cleanFn = cb(readline());
function readlineWidth() {
return import_cli_width.default({ defaultWidth: 80, output: readline().output });
const width = readlineWidth();
import * as readline2 from "node:readline";
const width = readlineWidth();
const rl = readline2.createInterface({
Findings
2 Critical3 High3 Medium4 Low
CriticalCredential Exfiltrationdist/packager-tool-ma7s1htk.js
CriticalTrigger Reachable Dangerous Capabilitydist/packager-tool-ma7s1htk.js
HighCredential Redirect Persistencedist/packager-tool-ma7s1htk.js
HighTrigger Reachable Credential Exfiltrationdist/packager-tool-ma7s1htk.js
HighSemantic Analysis Limiteddist/index-h8cph72k.js
MediumNetwork
MediumEnvironment Vars
MediumStructural Risk Force Deep Review
LowFilesystem
LowHigh Entropy Strings
LowUrl Strings
LowNo License
Affected versions and remediation
This report applies to @uipath/codedapp-tool@1.202.0.
See all versions of @uipath/codedapp-tool for other recorded verdicts.
- Review the evidence and your use of @uipath/codedapp-tool@1.202.0 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.