registry / @uipath/data-fabric-tool / 1.202.0

@uipath/data-fabric-tool@1.202.0

Manage Data Fabric entities and records.

AI Security Review

scanned 28d ago · by lpm-firewall-ai

Static inspection shows a UiPath Data Fabric CLI with no npm lifecycle hooks and no code that mutates agent config or exfiltrates secrets off the product path. Process spawning and telemetry run only as part of the user-invoked CLI and match first-party UiPath behavior.

Static reason

One or more suspicious static signals were detected.

Trigger

A user runs the data-fabric-tool binary or imports registerCommands and invokes a command.

Impact

Effects stay within the invoked CLI action: API changes the user requested, local UiPath profile auth, and product telemetry. No unconsented control-surface write or covert payload was found.

Mechanism

Commands authenticate to the caller-configured UiPath base URL and call Data Fabric APIs. Telemetry, when initialized, posts to the Azure Application Insights endpoint embedded in the bundle.

AI rationale

Network endpoints2

cloud.uipath.comwesteurope-5.in.applicationinsights.azure.com/

Decision evidence

public snapshot

AI called this Clean at 84.0% confidence as Benign with low false-positive risk.

Evidence for AI clean decision

package.json has no install lifecycle scripts. It exports dist/tool.js and dist/packager-tool.js and sets the data-fabric-tool bin to dist/index.js, which only builds a CLI and parses argv.
dist/packager-tool-k5a008wm.js registers user-invoked Data Fabric commands for entities, records, files, choice sets, roles, and directory. Child process use is a Windows reg query for UiPath analytics id and bundled open/PowerShell helpers, not an install hook.
Searches found no eval, new Function, preinstall, foreign agent config writes, or self-dependency. Network calls are UiPath cloud auth and Application Insights telemetry after the CLI runs.

Evidence against

A base64 Application Insights connection string and OpenTelemetry host machine-id detectors are bundled and send product telemetry when the CLI runs.
Destructive record deletes and local ~/.uipath credential reads exist, but only after an explicit user command.

Behavioral surface

Source

ChildProcessCryptoEnvironmentVarsFilesystem

Source & flagged code

5 flagged

dist/packager-tool-k5a008wm.jsView file

8846var telemetryInstanceSlot = singleton("TelemetryService"); L8847: var DEFAULT_AI_CONNECTION_STRING = atob("[redacted]... L8848: function getGlobalTelemetryInstance() {

High

Base64 Obscured Url

Source decodes a Base64-obscured HTTP endpoint at runtime.

dist/packager-tool-k5a008wm.jsView on unpkg · L8846

24919// src/tool.ts var metadata = { name: "data-fabric-tool", version: package_default.version, description: "Manage Data Fabric entity schemas, records, and file attachments.",

Low

Suspicious Lifecycle Evidence

dist/packager-tool-k5a008wm.js registers user-invoked Data Fabric commands for entities, records, files, choice sets, roles, and directory. Child process use is a Windows reg query for UiPath analytics id and bundled open/PowerShell helpers, not an install hook.

dist/packager-tool-k5a008wm.jsView on unpkg · L24919

dist/index-sby22td6.jsView file

Lines 68-108javascript

68 return false;

69 }

70 if (os.release().toLowerCase().includes("microsoft")) {

71 if (isInsideContainer()) {

72 return false;

73 }

74 return true;

75 }

76 try {

77 if (fs3.readFileSync("/proc/version", "utf8").toLowerCase().includes("microsoft")) {

78 return !isInsideContainer();

79 }

80 } catch {}

81 if (fs3.existsSync("/proc/sys/fs/binfmt_misc/WSLInterop") || fs3.existsSync("/run/WSL")) {

82 return !isInsideContainer();

83 }

84 return false;

85};

86var is_wsl_default = process.env.__IS_WSL_TEST__ ? isWsl : isWsl();

88// ../../node_modules/powershell-utils/index.js

89import process2 from "node:process";

90import { Buffer } from "node:buffer";

91import { promisify } from "node:util";

Low

Suspicious Lifecycle Evidence

dist/index-sby22td6.jsView on unpkg · L88

92import childProcess from "node:child_process";

93var execFile = promisify(childProcess.execFile);

94var powerShellPath = () => `${process2.env.SYSTEMROOT || process2.env.windir || String.raw`C:\Windows`}\\System32\\WindowsPowerShell\\

95var executePowerShell = async (command, options = {}) => {

96 const {

97 powerShellPath: psPath,

98 ...execFileOptions

99 } = options;

100 const encodedCommand = executePowerShell.encodeCommand(command);

101 return execFile(psPath ?? powerShellPath(), [

102 ...executePowerShell.argumentsPrefix,

103 encodedCommand

104 ], {

105 encoding: "utf8",

106 ...execFileOptions

107 });

108};

•stage = ast_semantic_analysis; reason = ast_alias_growth_limit_exceeded; limitedFiles = 1

High

Semantic Analysis Limited

A bounded semantic-analysis stage reached its safety limit; remaining detectors completed, but this package requires AI review.

dist/index-sby22td6.jsView on unpkg

package.jsonView file

Lines 1-23json

2 "name": "@uipath/data-fabric-tool",

3 "license": "SEE LICENSE IN LICENSE.txt",

4 "version": "1.202.0",

5 "description": "Manage Data Fabric entities and records.",

Source & flagged code

5 flagged · loading source

dist/packager-tool-k5a008wm.jsView file

8846var telemetryInstanceSlot = singleton("TelemetryService"); L8847: var DEFAULT_AI_CONNECTION_STRING = atob("[redacted]... L8848: function getGlobalTelemetryInstance() {

High

Base64 Obscured Url

Source decodes a Base64-obscured HTTP endpoint at runtime.

dist/packager-tool-k5a008wm.jsView on unpkg · L8846

24919// src/tool.ts var metadata = { name: "data-fabric-tool", version: package_default.version, description: "Manage Data Fabric entity schemas, records, and file attachments.",

Low

Suspicious Lifecycle Evidence

dist/packager-tool-k5a008wm.jsView on unpkg · L24919

dist/index-sby22td6.jsView file

•

Findings

2 High2 Medium7 Low

HighBase64 Obscured Urldist/packager-tool-k5a008wm.js

HighSemantic Analysis Limiteddist/index-sby22td6.js

MediumNetwork

MediumEnvironment Vars

LowFilesystem

LowHigh Entropy Strings

LowUrl Strings

LowNo License

LowSuspicious Lifecycle Evidencepackage.json

LowSuspicious Lifecycle Evidencedist/packager-tool-k5a008wm.js

LowSuspicious Lifecycle Evidencedist/index-sby22td6.js

Affected versions and remediation

This report applies to @uipath/data-fabric-tool@1.202.0.

See all versions of @uipath/data-fabric-tool for other recorded verdicts.

Review the evidence and your use of @uipath/data-fabric-tool@1.202.0 before allowing it. Restrict the permissions described in this report.
Choose an independently verified alternative or release. This report does not establish that other versions are safe.

Evidence last updated: 2026-09-26 03:33:25.988Z (UTC).

Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.

AI Security Review

Decision evidence

Source & flagged code

Source & flagged code

Findings

Affected versions and remediation

Related packages

More from @uipath

Related packages

More from @uipath

Source & flagged code