registry / @uipath/data-fabric-tool / 1.202.1
@uipath/data-fabric-tool@1.202.1
Manage Data Fabric entities and records.
AI Security Review
scanned 28d ago · by lpm-firewall-aiStatic inspection shows a first-party UiPath CLI whose network, process, and telemetry behavior is tied to the product and to user invocation. There is no install lifecycle, foreign agent-config write, or covert exfiltration chain.
Static reason
One or more suspicious static signals were detected.
Trigger
The user runs the data-fabric-tool binary or imports the module; nothing executes on npm install.
Impact
No unconsented mutation, credential theft, remote payload execution, or persistence was established.
Mechanism
Commands talk to a caller-configured UiPath host that defaults to cloud.uipath.com, and local process helpers open the browser or read machine identifiers with fixed commands.
AI rationale
Static inspection shows a first-party UiPath CLI whose network, process, and telemetry behavior is tied to the product and to user invocation. There is no install lifecycle, foreign agent-config write, or covert exfiltration chain.
Decision evidence
public snapshotAI called this Clean at 86.0% confidence as Benign with low false-positive risk.
Evidence for AI clean decision
- package.json names a UiPath Data Fabric CLI at version 1.202.1 with main and bin entrypoints and no install lifecycle scripts.
- The bundled client defaults its API authority to https://cloud.uipath.com, the vendor cloud host.
- child_process.execFile appears only in the bundled browser-open helper, which launches a fixed Windows PowerShell path when the user invokes the CLI.
Evidence against
- Application Insights telemetry and OpenTelemetry machine-id reads are present, but they target the vendor telemetry endpoint and fixed local identifiers, not an unrelated recipient or install hook.
Behavioral surface
ChildProcessCryptoEnvironmentVarsEvalFilesystemNetwork
HighEntropyStringsUrlStrings
NoLicense
Source & flagged code
5 flagged · loading sourcedist/packager-tool-v8wac3s3.jsView file
8846var telemetryInstanceSlot = singleton("TelemetryService");
L8847: var DEFAULT_AI_CONNECTION_STRING = atob("[redacted]...
L8848: function getGlobalTelemetryInstance() {
High
Base64 Obscured Url
Source decodes a Base64-obscured HTTP endpoint at runtime.
dist/packager-tool-v8wac3s3.jsView on unpkg · L884610330var DEFAULT_BASE_URL = "https://cloud.uipath.com";
var DEFAULT_AUTH_TIMEOUT_MS2 = 5 * 60 * 1000;
// ../auth/src/config.ts
var DEFAULT_CLIENT_ID = "36dea5b8-e8b
Medium
Stripped Provenance Metadata
The bundled client defaults its API authority to https://cloud.uipath.com, the vendor cloud host.
dist/packager-tool-v8wac3s3.jsView on unpkg · L10330dist/index-sby22td6.jsView file
•stage = ast_semantic_analysis; reason = ast_alias_growth_limit_exceeded; limitedFiles = 1
Findings
2 High3 Medium7 Low
HighBase64 Obscured Urldist/packager-tool-v8wac3s3.js
HighSemantic Analysis Limiteddist/index-sby22td6.js
MediumNetwork
MediumEnvironment Vars
MediumStripped Provenance Metadatadist/packager-tool-v8wac3s3.js
LowEval
LowFilesystem
LowHigh Entropy Strings
LowUrl Strings
LowNo License
LowSuspicious Lifecycle Evidencepackage.json
LowAi Review Evidencedist/index-sby22td6.js
Affected versions and remediation
This report applies to @uipath/data-fabric-tool@1.202.1.
See all versions of @uipath/data-fabric-tool for other recorded verdicts.
- Review the evidence and your use of @uipath/data-fabric-tool@1.202.1 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.