@uipath/data-fabric-tool@1.201.0
Manage Data Fabric entities and records.
AI Security Review
scanned 2mo ago · by lpm-firewall-aiThe package appears to be a user-invoked UiPath Data Fabric CLI, not an install-hook attack. However, inspectable bundled code transmits identity and tenancy metadata through a hard-coded telemetry endpoint, so a clean verdict is not justified.
Static reason
One or more suspicious static signals were detected.
Trigger
A user runs a Data Fabric CLI command after configuring UiPath authentication.
Impact
Organization, tenant, cloud user identifier, client ID, redirect URI, and cloud URL may be transmitted with telemetry.
Mechanism
Hard-coded telemetry exporter posts enriched event attributes over HTTPS.
AI rationale
The package appears to be a user-invoked UiPath Data Fabric CLI, not an install-hook attack. However, inspectable bundled code transmits identity and tenancy metadata through a hard-coded telemetry endpoint, so a clean verdict is not justified.
Evidence
dist/tool-91jjmaaz.js
Network endpoints1
westeurope-5.in.applicationinsights.azure.com
Decision evidence
public snapshotAI called this Suspicious at 87.0% confidence as Unknown with low false-positive risk.
Evidence for warning
- The bundled telemetry client posts JSON events to a hard-coded Application Insights ingestion endpoint.
- Telemetry attributes include organization, tenant, cloud user, redirect URI, and client ID; the user ID is derived from the access token.
- The executable bundle includes a detached child-process launcher from the bundled URL-opening dependency.
Evidence against
- package.json has no lifecycle scripts or self-dependency; it only exposes library and CLI entry points.
- The authored CLI source registers Data Fabric commands and requires an existing UiPath login before creating its client.
- Telemetry code redacts sensitive property names and token-like values before sending command telemetry.
Behavioral surface
ChildProcessCryptoEnvironmentVarsFilesystemNetworkShell
HighEntropyStringsUrlStrings
Source & flagged code
5 flagged · loading sourcedist/tool-91jjmaaz.jsView file
8190var telemetryInstanceSlot = singleton("TelemetryService");
L8191: var DEFAULT_AI_CONNECTION_STRING = atob("[redacted]...
L8192: function getGlobalTelemetryInstance() {
High
Base64 Obscured Url
Source decodes a Base64-obscured HTTP endpoint at runtime.
dist/tool-91jjmaaz.jsView on unpkg · L819010559async sendToApplicationInsights(payload) {
try {
const ingestionEndpoint = this.extractIngestionEndpoint();
if (!ingestionEndpoint) {
console.debug("No ingestion endpoint found in connection string");
return;
}
const url = `${ingestionEndpoint}/v2/track`;
const response = await fetch(url, {
method: "POST",
headers: { "Content-Type": "application/json" },
body: JSON.stringify(payload)
});
Medium
Ai Review Evidence
The bundled telemetry client posts JSON events to a hard-coded Application Insights ingestion endpoint.
dist/tool-91jjmaaz.jsView on unpkg · L10559dist/index-w03qc9m8.jsView file
Findings
2 High5 Medium3 Low
HighBase64 Obscured Urldist/tool-91jjmaaz.js
HighSemantic Analysis Limiteddist/index-w03qc9m8.js
MediumNetwork
MediumEnvironment Vars
MediumAi Review Evidencedist/tool-91jjmaaz.js
MediumSuspicious Dependency Evidencedist/index-w03qc9m8.js
MediumSuspicious Dependency Evidencepackage.json
LowFilesystem
LowHigh Entropy Strings
LowUrl Strings
Affected versions and remediation
This report applies to @uipath/data-fabric-tool@1.201.0.
See all versions of @uipath/data-fabric-tool for other recorded verdicts.
- Review the evidence and your use of @uipath/data-fabric-tool@1.201.0 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.