@uipath/common@1.202.1

Common infrastructure needed by uip tools.

AI Security Review

scanned 28d ago · by lpm-firewall-ai

Static inspection shows a UiPath CLI utility library with no install scripts and no import-time execution. OS process use and Application Insights telemetry are caller-invoked product features, not a concrete attack.

Static reason

One or more suspicious static signals were detected.; previous stored version diff introduced dangerous source

Trigger

No automatic trigger. Telemetry and OS helpers run only when a consuming tool calls the exported functions.

Impact

No unconsented credential theft, persistence, or foreign agent-control mutation was established.

Mechanism

There is no lifecycle hook, self-dependency, or hidden payload. Optional telemetry posts usage to UiPath Application Insights after telemetryInit unless disabled.

AI rationale

Decision evidence

public snapshot

AI called this Clean at 86.0% confidence as Benign with low false-positive risk.

Evidence for AI clean decision

package.json names @uipath/common 1.202.1 as a library with main dist/index.js and no preinstall, install, or postinstall scripts.
dist/index.js is an ESM export barrel; telemetryInit is defined as a caller-invoked function and is not executed on import.
Telemetry is skipped when UIPATH_TELEMETRY_DISABLED is 1 or true; otherwise it targets the product Application Insights endpoint only after telemetryInit.

Evidence against

Bundled child_process helpers run PowerShell, browser lookup, and a Windows registry read only when those library functions are called.
A default Application Insights connection string is present, but ingestion is product telemetry gated by the caller and the disable flag.

Behavioral surface

Source

ChildProcessCryptoDynamicRequireEnvironmentVarsEvalFilesystem

Supply chain

HighEntropyStringsUrlStrings

Manifest

Source & flagged code

6 flagged

dist/index.browser.jsView file

24241async function importPackagerTool(specifier) { L24242: const [importError, mod] = await catchError(import(specifier)); L24243: if (importError)

Medium

Dynamic Require

Package source references dynamic require/import behavior.

dist/index.browser.jsView on unpkg · L24241

dist/index.jsView file

Lines 10520-10560javascript

10520 }

10521 if (now - stats.mtimeMs > MAX_SPOOL_AGE_MS) {

10522 await catchError(fs7.rm(filePath));

10523 continue;

10524 }

10525 if (name.endsWith(PENDING_SUFFIX)) {

10526 pending.push({ path: filePath, mtimeMs: stats.mtimeMs });

10527 }

10528 }

10529 if (pending.length > MAX_SPOOL_FILES) {

10530 pending.sort((a, b) => a.mtimeMs - b.mtimeMs);

10531 const excess = pending.slice(0, pending.length - MAX_SPOOL_FILES);

10532 for (const file of excess) {

10533 await catchError(fs7.rm(file.path));

10534 }

10535 logger.debug(`[TelemetrySpool] deleted ${excess.length} oldest files over the ${MAX_SPOOL_FILES}-file cap`);

10536 }

10537}

10538

10539// src/telemetry/telemetry-init.ts

10540var telemetryInstanceSlot = singleton("TelemetryService");

10541var DEFAULT_AI_CONNECTION_STRING = atob("SW5zdHJ1bWVudGF0aW9uS2V5PTliZDM3NDgyLTgxMGUtNDQyYS1hYWE2LWQzOGVmNjVjNjY3NDtJbmdlc3Rpb25FbmRwb2ludD1odHRwczovL3dlc3RldXJvcGUtNS5pbi5hcHBsaWNhdGlvbmluc2lnaHRzLmF6dXJlLmNvbS87TGl2ZUVuZHBvaW50PWh0dHBzOi8vd2VzdGV1cm9wZS5saXZlZGlhZ25vc3RpY3MubW9uaXRvci5henVyZS5jb20vO0FwcGxpY2F0aW9uSWQ9MzU2OTdlZjEtOGJkMC00ZjE5LWEyN2MtZDg3Y2NhYzY2ZDJj");

10542function getConnectionString() {

High

Base64 Obscured Url

Source decodes a Base64-obscured HTTP endpoint at runtime.

dist/index.jsView on unpkg · L10540

10543 return process.env.UIPATH_AI_CONNECTION_STRING || DEFAULT_AI_CONNECTION_STRING;

10544}

10545var DEFAULT_INGESTION_ORIGIN = "https://dc.services.visualstudio.com";

10546function getTelemetryIngestionOrigin() {

10547 for (const part of getConnectionString().split(";")) {

10548 const separator = part.indexOf("=");

10549 if (separator === -1) {

10550 continue;

10551 }

10552 if (part.slice(0, separator).trim().toLowerCase() !== "ingestionendpoint") {

10553 continue;

10554 }

10555 const [error, url] = catchError(() => new URL(part.slice(separator + 1).trim()));

10556 return error ? DEFAULT_INGESTION_ORIGIN : url.origin;

10557 }

10558 return DEFAULT_INGESTION_ORIGIN;

10559}

10560async function createAppInsightsProvider() {

Lines 10592-10632javascript

10592 telemetryInstanceSlot.set(instance);

10593}

10594var _localTelemetryInstance;

10595function getTelemetryInstance() {

10596 const global = getGlobalTelemetryInstance();

10597 if (global)

10598

Lines 13483-13523javascript

13483async function ensurePackagerFactory(verb, packageName) {

13484 const provider = factorySlot.get();

13485 if (provider) {

13486 await provider(verb);

•matchType = previous_version_dangerous_delta matchedPackage = @uipath/common@1.201.0 matchedIdentity = npm:QHVpcGF0aC9jb21tb24:1.201.0 similarity = 0.429 summary = stored previous version shares package body but lacks this dangerous source file

High

Previous Version Dangerous Delta

This package version adds a dangerous source file absent from the previous stored version; route for source-aware review.

dist/index.jsView on unpkg

package.jsonView file

Lines 1-21json

2 "name": "@uipath/common",

3 "license": "SEE LICENSE IN LICENSE.txt",

4 "version": "1.202.1",

5 "description": "Common infrastructure needed by uip tools.",

Source & flagged code

6 flagged · loading source

dist/index.browser.jsView file

24241async function importPackagerTool(specifier) { L24242: const [importError, mod] = await catchError(import(specifier)); L24243: if (importError)

Medium

Dynamic Require

Package source references dynamic require/import behavior.

dist/index.browser.jsView on unpkg · L24241

dist/index.jsView file

10540var telemetryInstanceSlot = singleton("TelemetryService"); L10541: var DEFAULT_AI_CONNECTION_STRING = atob("[redacted]... L10542: function getConnectionString() {

High

Base64 Obscured Url

Source decodes a Base64-obscured HTTP endpoint at runtime.

dist/index.jsView on unpkg · L10540

High

Previous Version Dangerous Delta

Findings

2 High2 Medium8 Low

HighBase64 Obscured Urldist/index.js

HighPrevious Version Dangerous Deltadist/index.js

MediumDynamic Requiredist/index.browser.js

MediumEnvironment Vars

LowEval

LowFilesystem

LowHigh Entropy Strings

LowUrl Strings

LowNo License

LowSuspicious Lifecycle Evidencepackage.json

LowAi Review Evidencedist/index.js

Affected versions and remediation

This report applies to @uipath/common@1.202.1.

See all versions of @uipath/common for other recorded verdicts.

Review the evidence and your use of @uipath/common@1.202.1 before allowing it. Restrict the permissions described in this report.
Choose an independently verified alternative or release. This report does not establish that other versions are safe.

Evidence last updated: 2026-09-26 03:37:58.307Z (UTC).

Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.

AI Security Review

Decision evidence

Source & flagged code

Source & flagged code

Findings

Affected versions and remediation

Related packages

More from @uipath

Behavioral surface

Related packages

More from @uipath

Source & flagged code