@uipath/codedapp-tool@1.202.2
Build, pack, publish, deploy, and manage UiPath Coded Web Applications.
AI Security Review
scanned 6d ago · by lpm-firewall-aiThe inspected source does not support the scanner claim of a fixed unofficial credential gateway. It does show that a user-supplied deploy base URL can override the saved service URL while the saved access token is reused, so this warrants a warning for conditional credential exposure.
Static reason
High-risk behavior combination matched malicious policy.
Trigger
The user runs deploy with a base URL that differs from the saved service URL.
Impact
The selected host receives the saved access token in a bearer authorization header.
Mechanism
The CLI loads the saved token before the command, lets the base URL option override environment configuration, and uses the resulting URL for an authenticated upload request.
AI rationale
The inspected source does not support the scanner claim of a fixed unofficial credential gateway. It does show that a user-supplied deploy base URL can override the saved service URL while the saved access token is reused, so this warrants a warning for conditional credential exposure.
Evidence
dist/packager-tool-npxwr0xj.jsdist/packager-tool-pvtdkdk8.jspackage.json
Network endpoints1
cloud.uipath.com
Decision evidence
public snapshotAI called this Suspicious at 88.0% confidence as Dangerous Capability with medium false-positive risk.
Evidence for warning
- The manifest identifies a CLI entrypoint and package exports for the coded app tool.
- For non-init commands, the CLI loads a logged-in session and copies its access token and service URL into the environment; the auth status labels this source as a saved login.
- The deploy command accepts a base URL, and command flags take precedence over environment values.
- The URL validator requires HTTPS but does not restrict the host to UiPath domains.
- The deploy upload request sends the configured base URL a bearer token from the same configuration.
Evidence against
Behavioral surface
ChildProcessCryptoEnvironmentVarsEvalFilesystemNetwork
HighEntropyStringsUrlStrings
NoLicense
Source & flagged code
5 flagged · loading sourcedist/packager-tool-npxwr0xj.jsView file
122defaultWidth: 0,
L123: output: process.stdout,
L124: tty: __require("tty")
...
L146: }
L147: if (process.env.CLI_WIDTH) {
L148: const width = parseInt(process.env.CLI_WIDTH, 10);
...
L1444: `).split(`
L1445: `).map((line) => exec(line, columns, options)).join(`
L1446: `);
...
L7737: }
L7738: return this.encoder.write(str);
L7739: };
Critical
Credential Exfiltration
Source appears to send environment or credential material to an external endpoint.
dist/packager-tool-npxwr0xj.jsView on unpkg · L122122Trigger-reachable chain: manifest.main -> dist/tool.js -> dist/packager-tool-npxwr0xj.js
L122: defaultWidth: 0,
L123: output: process.stdout,
L124: tty: __require("tty")
...
L146: }
L147: if (process.env.CLI_WIDTH) {
L148: const width = parseInt(process.env.CLI_WIDTH, 10);
...
L1444: `).split(`
L1445: `).map((line) => exec(line, columns, options)).join(`
L1446: `);
...
L7737: }
L7738: return this.encoder.write(str);
L7739: };
Critical
Trigger Reachable Dangerous Capability
A package entrypoint or install-time lifecycle script reaches a source file with blocking dangerous behavior.
dist/packager-tool-npxwr0xj.jsView on unpkg · L122•Manifest-reachable source captures an API credential, sends it to a fixed unofficial gateway, and persists that redirection in agent or shell configuration.
dist/packager-tool-npxwr0xj.js:
configKey: "baseUrl",
flag: "--baseUrl",
headers.Authorization = `Bearer ${bearerToken}`;
const { baseUrl, orgName, folderKey, systemName, routingName } = params;
const host = baseUrl.replace(/^https?:\/\//, "").split("/")[0];
const base = `${envConfig.baseUrl}/${envConfig.orgId}${API_ENDPOINTS.DEPLOYED_APPS}`;
const url = appendQueryParams(`${envConfig.baseUrl}/${envConfig.orgId}${API_ENDPOINTS.EDIT_DEPLOYED_APP.replace("{appId}", deployedAppId)}`, BASIC_ORIGIN_QUERY_PARAMS);
const url = appendQueryParams(`${envConfig.baseUrl}/${envConfig.orgId}${endpoint}`, BASIC_ORIGIN_QUERY_PARAMS);
Findings
2 Critical3 High3 Medium5 Low
CriticalCredential Exfiltrationdist/packager-tool-npxwr0xj.js
CriticalTrigger Reachable Dangerous Capabilitydist/packager-tool-npxwr0xj.js
HighCredential Redirect Persistencedist/packager-tool-npxwr0xj.js
HighTrigger Reachable Credential Exfiltrationdist/packager-tool-npxwr0xj.js
HighSemantic Analysis Limiteddist/index-h8cph72k.js
MediumNetwork
MediumEnvironment Vars
MediumStructural Risk Force Deep Review
LowEval
LowFilesystem
LowHigh Entropy Strings
LowUrl Strings
LowNo License
Affected versions and remediation
This report applies to @uipath/codedapp-tool@1.202.2.
See all versions of @uipath/codedapp-tool for other recorded verdicts.
- Review the evidence and your use of @uipath/codedapp-tool@1.202.2 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.