registry / @uipath/insights-tool / 1.201.0
@uipath/insights-tool@1.201.0
Query UiPath Insights data — jobs, failures, and performance metrics.
AI Security Review
scanned 2mo ago · by lpm-firewall-aiThere is no lifecycle hook or concrete malicious chain, but runtime-obscured telemetry and a bundled encoded PowerShell capability remain unresolved. Downgrade for warning rather than block because execution is user-invoked and no attack behavior was established.
Static reason
One or more suspicious static signals were detected.
Trigger
A user runs the insights-tool CLI command.
Impact
Authenticated request metadata and command telemetry may be transmitted during normal CLI use.
Mechanism
User-invoked authenticated API client with obscured telemetry configuration.
AI rationale
There is no lifecycle hook or concrete malicious chain, but runtime-obscured telemetry and a bundled encoded PowerShell capability remain unresolved. Downgrade for warning rather than block because execution is user-invoked and no attack behavior was established.
Evidence
dist/tool-xmkb1ctj.jsdist/index-w03qc9m8.js
Network endpoints2
cloud.uipath.comgovcloud.uipath.us
Decision evidence
public snapshotAI called this Suspicious at 78.0% confidence as Unknown with medium false-positive risk.
Evidence for warning
- The manifest exposes an executable CLI, so its bundled runtime code runs when the user invokes the command.
- The CLI bundle hides a telemetry connection string behind Base64 decoding at runtime.
- A bundled browser-launch helper can run PowerShell with ExecutionPolicy Bypass and an encoded command.
Evidence against
- package.json contains no preinstall, install, postinstall, or other lifecycle script.
- The visible command implementation registers Insights query commands and sends authenticated requests only after CLI invocation.
- The PowerShell helper is in a bundled cross-platform browser-opening dependency, not connected to an install hook or Insights command in the inspected source.
Behavioral surface
ChildProcessCryptoEnvironmentVarsFilesystemNetworkShell
HighEntropyStringsUrlStrings
Source & flagged code
5 flagged · loading sourcedist/tool-xmkb1ctj.jsView file
3396var telemetryInstanceSlot = singleton("TelemetryService");
L3397: var DEFAULT_AI_CONNECTION_STRING = atob("[redacted]...
L3398: function getGlobalTelemetryInstance() {
High
Base64 Obscured Url
Source decodes a Base64-obscured HTTP endpoint at runtime.
dist/tool-xmkb1ctj.jsView on unpkg · L33963395// ../common/src/telemetry/telemetry-init.ts
var telemetryInstanceSlot = singleton("TelemetryService");
var DEFAULT_AI_CONNECTION_STRING = atob("[redacted]");
function getGlobalTelemetryInstance() {
Medium
Ai Review Evidence
The CLI bundle hides a telemetry connection string behind Base64 decoding at runtime.
dist/tool-xmkb1ctj.jsView on unpkg · L3395dist/index-w03qc9m8.jsView file
•stage = ast_semantic_analysis; reason = ast_alias_growth_limit_exceeded; limitedFiles = 1
High
Findings
2 High5 Medium3 Low
HighBase64 Obscured Urldist/tool-xmkb1ctj.js
HighSemantic Analysis Limiteddist/index-w03qc9m8.js
MediumNetwork
MediumEnvironment Vars
MediumAi Review Evidencepackage.json
MediumAi Review Evidencedist/tool-xmkb1ctj.js
MediumAi Review Evidencedist/index-w03qc9m8.js
LowFilesystem
LowHigh Entropy Strings
LowUrl Strings
Affected versions and remediation
This report applies to @uipath/insights-tool@1.201.0.
See all versions of @uipath/insights-tool for other recorded verdicts.
- Review the evidence and your use of @uipath/insights-tool@1.201.0 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.