registry / @uipath/data-fabric-tool / 1.200.0

@uipath/data-fabric-tool@1.200.0

Manage Data Fabric entities and records.

AI Security Review

scanned 28d ago · by lpm-firewall-ai

Inspection shows a first-party CLI with no lifecycle scripts and command registration limited to Data Fabric operations. Network and process use stay on the user-invoked auth and vendor telemetry path, so no concrete attack remains.

Static reason

One or more suspicious static signals were detected.; previous stored version diff introduced dangerous source

Trigger

A user runs the data-fabric-tool binary or imports the module.

Impact

No unconsented install mutation, credential theft, or remote code execution was established.

Mechanism

Commands call UiPath Data Fabric APIs using the configured cloud base URL and local auth. Telemetry, when active, goes to the vendor Application Insights endpoint after property redaction.

AI rationale

Network endpoints2

cloud.uipath.comwesteurope-5.in.applicationinsights.azure.com/

Decision evidence

public snapshot

AI called this Clean at 86.0% confidence as Benign with low false-positive risk.

Evidence for AI clean decision

package.json has no install lifecycle scripts and points main and bin at local dist entrypoints.
registerCommands only wires Data Fabric entity, record, file, choice-set, role, and directory commands.
child_process usage in the cited bundle is the local open helper that launches a caller-supplied URL.

Evidence against

Bundled UiPath SDK code can send redacted command telemetry to a fixed Application Insights ingestion host when the CLI runs.

Behavioral surface

Source

ChildProcessCryptoEnvironmentVarsEvalFilesystemNetwork

Supply chain

HighEntropyStringsUrlStrings

ManifestNo manifest risk signals triggered.

scanned 45 file(s), 1.67 MB of source, external domains: alpha.uipath.com, cloud.uipath.com, example.com, fonts.googleapis.com, fonts.gstatic.com, govcloud.uipath.us, json-schema.org, staging.uipath.com, westeurope-5.in.applicationinsights.azure.com, westeurope.livediagnostics.monitor.azure.com, www.w3.org

Source & flagged code

6 flagged

dist/tool-q90kqh83.jsView file

Lines 1-39javascript

1import {

2 AUTH_CANCELLED_ERROR_CODE,

3 DEFAULT_AUTH_TIMEOUT_MS

4} from "./tool-1ps2qeqg.js";

5import {

6 __require

7} from "./tool-0v6na3yp.js";

9// ../filesystem/src/node.ts

10import { randomUUID } from "node:crypto";

11import { existsSync } from "node:fs";

12import * as fs6 from "node:fs/promises";

13import * as os2 from "node:os";

14import * as path2 from "node:path";

16// ../../node_modules/open/index.js

17import process8 from "node:process";

18import path from "node:path";

19import { fileURLToPath } from "node:url";

20import childProcess3 from "node:child_process";

21import fs5, { constants as fsConstants2 } from "node:fs/promises";

High

Child Process

Package source references child process execution.

dist/tool-q90kqh83.jsView on unpkg · L19

23// ../../node_modules/wsl-utils/index.js

24import { promisify as promisify2 } from "node:util";

25import childProcess2 from "node:child_process";

26import fs4, { constants as fsConstants } from "node:fs/promises";

28// ../../node_modules/wsl-utils/node_modules/is-wsl/index.js

29import process2 from "node:process";

30import os from "node:os";

31import fs3 from "node:fs";

33// ../../node_modules/is-inside-container/index.js

34import fs2 from "node:fs";

36// ../../node_modules/is-inside-container/node_modules/is-docker/index.js

37import fs from "node:fs";

38var isDockerCached;

39function hasDockerEnv() {

•matchType = previous_version_dangerous_delta matchedPackage = @uipath/data-fabric-tool@1.201.0 matchedIdentity = npm:[redacted]:1.201.0 similarity = 0.756 summary = stored previous version shares package body but lacks this dangerous source file

Critical

Previous Version Dangerous Delta

This package version adds a dangerous source file absent from the previous stored version; route for source-aware review.

dist/tool-q90kqh83.jsView on unpkg

•stage = ast_semantic_analysis; reason = ast_alias_growth_limit_exceeded; limitedFiles = 1

High

Semantic Analysis Limited

A bounded semantic-analysis stage reached its safety limit; remaining detectors completed, but this package requires AI review.

dist/tool-q90kqh83.jsView on unpkg

dist/tool-8chtf11r.jsView file

24Cross-file remote execution chain: dist/tool-8chtf11r.js spawns dist/tool-q90kqh83.js; helper contains network access plus dynamic code execution. L24: class CommanderError extends Error { L25: constructor(exitCode, code, message) { L26: super(message); ... L742: var EventEmitter = __require("node:events").EventEmitter; L743: var childProcess = __require("node:child_process"); L744: var path = __require("node:path"); ... L788: this._outputConfiguration = { L789: writeOut: (str) => process2.stdout.write(str), L790: writeErr: (str) => process2.stderr.write(str), ... L2681: function getNumberFromEnv(key) { L2682: const raw = process.env[key]; L2683: if (raw == null || raw.trim() === "") {

High

Cross File Remote Execution Context

Source spawns a local helper that also contains network and dynamic execution context; review data flow before blocking.

dist/tool-8chtf11r.jsView on unpkg · L24

13171var telemetryInstanceSlot = singleton("TelemetryService"); L13172: var DEFAULT_AI_CONNECTION_STRING = atob("[redacted]... L13173: function getGlobalTelemetryInstance() {

High

Base64 Obscured Url

Source decodes a Base64-obscured HTTP endpoint at runtime.

dist/tool-8chtf11r.jsView on unpkg · L13171

package.jsonView file

Lines 1-19json

2 "name": "@uipath/data-fabric-tool",

3 "license": "MIT",

4 "version": "1.200.0",

5 "description": "Manage Data Fabric entities and records.",

Source & flagged code

6 flagged · loading source

dist/tool-q90kqh83.jsView file

Critical

Previous Version Dangerous Delta

This package version adds a dangerous source file absent from the previous stored version; route for source-aware review.

dist/tool-q90kqh83.jsView on unpkg

19import { fileURLToPath } from "node:url"; L20: import childProcess3 from "node:child_process"; L21: import fs5, { constants as fsConstants2 } from "node:fs/promises";

High

Child Process

Package source references child process execution.

dist/tool-q90kqh83.jsView on unpkg · L19

•stage = ast_semantic_analysis; reason = ast_alias_growth_limit_exceeded; limitedFiles = 1

High

Semantic Analysis Limited

A bounded semantic-analysis stage reached its safety limit; remaining detectors completed, but this package requires AI review.

dist/tool-q90kqh83.jsView on unpkg

Findings

1 Critical4 High2 Medium5 Low

CriticalPrevious Version Dangerous Deltadist/tool-q90kqh83.js

HighChild Processdist/tool-q90kqh83.js

HighCross File Remote Execution Contextdist/tool-8chtf11r.js

HighBase64 Obscured Urldist/tool-8chtf11r.js

HighSemantic Analysis Limiteddist/tool-q90kqh83.js

MediumNetwork

MediumEnvironment Vars

LowEval

LowFilesystem

LowHigh Entropy Strings

LowUrl Strings

LowSuspicious Lifecycle Evidencepackage.json

Affected versions and remediation

This report applies to @uipath/data-fabric-tool@1.200.0.

See all versions of @uipath/data-fabric-tool for other recorded verdicts.

Review the evidence and your use of @uipath/data-fabric-tool@1.200.0 before allowing it. Restrict the permissions described in this report.
Choose an independently verified alternative or release. This report does not establish that other versions are safe.

Evidence last updated: 2026-09-26 03:33:49.390Z (UTC).

Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.

AI Security Review

Decision evidence

Source & flagged code

Source & flagged code

Findings

Affected versions and remediation

Related packages

More from @uipath

Related packages

More from @uipath

Source & flagged code