@uipath/codedapp-tool@1.204.1
Build, pack, publish, deploy, and manage UiPath Coded Web Applications.
AI Security Review
scanned 4d ago · by lpm-firewall-aiThe hardcoded tenant route combined with access-token availability leaves a concrete destination question unresolved, but the inspected source does not prove an unintended transfer or malicious behavior. Treat this as a warning for possible credential exposure.
Static reason
High-risk behavior combination matched malicious policy.; previous stored version diff introduced dangerous source
Trigger
A CLI operation that uses the generated client with an access token and does not override its base path.
Impact
If that route is not the intended service destination, a user's access token could be disclosed. The evidence does not establish that this happens.
Mechanism
The client defaults to the embedded tenant route; the inspected excerpts do not show the credential-bearing request caller or confirm the actual transfer.
AI rationale
The hardcoded tenant route combined with access-token availability leaves a concrete destination question unresolved, but the inspected source does not prove an unintended transfer or malicious behavior. Treat this as a warning for possible credential exposure.
Evidence
dist/tool.jsdist/packager-tool-j71fq5d5.js
Network endpoints1
alpha.uipath.com/uipattycyrhx/abizon_1/automationsolutions_
Decision evidence
public snapshotAI called this Suspicious at 68.0% confidence as Dangerous Capability with medium false-positive risk.
Evidence for warning
- The published entrypoint imports the flagged runtime bundle.
- The bundle defines a fixed alpha.uipath.com API base path containing a hardcoded tenant route.
- The generated client uses that base path by default unless configuration overrides it.
- The CLI can obtain an access token from UIPATH_ACCESS_TOKEN.
Evidence against
- The endpoint uses UiPath's alpha.uipath.com host, and the package describes a UiPath coded-app tool.
- The inspected excerpts do not establish that the token is sent to an unrelated recipient.
Behavioral surface
ChildProcessCryptoEnvironmentVarsEvalFilesystemNetwork
HighEntropyStringsMinifiedUrlStrings
NoLicense
Source & flagged code
6 flagged · loading sourcedist/packager-tool-j71fq5d5.jsView file
134defaultWidth: 0,
L135: output: process.stdout,
L136: tty: __require("tty")
...
L158: }
L159: if (process.env.CLI_WIDTH) {
L160: const width = parseInt(process.env.CLI_WIDTH, 10);
...
L1456: `).split(`
L1457: `).map((line) => exec(line, columns, options)).join(`
L1458: `);
...
L7749: }
L7750: return this.encoder.write(str);
L7751: };
Critical
Credential Exfiltration
Source appears to send environment or credential material to an external endpoint.
dist/packager-tool-j71fq5d5.jsView on unpkg · L134134Trigger-reachable chain: manifest.main -> dist/tool.js -> dist/packager-tool-j71fq5d5.js
L134: defaultWidth: 0,
L135: output: process.stdout,
L136: tty: __require("tty")
...
L158: }
L159: if (process.env.CLI_WIDTH) {
L160: const width = parseInt(process.env.CLI_WIDTH, 10);
...
L1456: `).split(`
L1457: `).map((line) => exec(line, columns, options)).join(`
L1458: `);
...
L7749: }
L7750: return this.encoder.write(str);
L7751: };
Critical
Trigger Reachable Dangerous Capability
A package entrypoint or install-time lifecycle script reaches a source file with blocking dangerous behavior.
dist/packager-tool-j71fq5d5.jsView on unpkg · L134•matchType = previous_version_dangerous_delta
matchedPackage = @uipath/codedapp-tool@1.203.1
matchedIdentity = npm:QHVpcGF0aC9jb2RlZGFwcC10b29s:1.203.1
similarity = 0.542
summary = stored previous version shares package body but lacks this dangerous source file
Findings
3 Critical3 High3 Medium5 Low
CriticalCredential Exfiltrationdist/packager-tool-j71fq5d5.js
CriticalTrigger Reachable Dangerous Capabilitydist/packager-tool-j71fq5d5.js
CriticalPrevious Version Dangerous Deltadist/packager-tool-j71fq5d5.js
HighCredential Redirect Persistencedist/packager-tool-j71fq5d5.js
HighTrigger Reachable Credential Exfiltrationdist/packager-tool-j71fq5d5.js
HighSemantic Analysis Limiteddist/index-h8cph72k.js
MediumNetwork
MediumEnvironment Vars
MediumStructural Risk Force Deep Review
LowEval
LowFilesystem
LowHigh Entropy Strings
LowUrl Strings
Low
Affected versions and remediation
This report applies to @uipath/codedapp-tool@1.204.1.
See all versions of @uipath/codedapp-tool for other recorded verdicts.
- Review the evidence and your use of @uipath/codedapp-tool@1.204.1 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.