registry / @uipath/insights-tool / 1.203.0
@uipath/insights-tool@1.203.0
Query UiPath Insights data — jobs, failures, and performance metrics.
AI Security Review
scanned 12d ago · by lpm-firewall-aiSource inspection found no lifecycle hooks or confirmed attack behavior. The encoded string is associated with telemetry initialization, while the active telemetry provider logs locally and Insights requests use the configured UiPath authority.
Static reason
One or more suspicious static signals were detected.
Trigger
A user invokes the CLI or calls the exported tool functions.
Impact
No confirmed unauthorized data transfer or harmful modification was found.
Mechanism
Requests are built from the configured UiPath authority and route data; the flagged encoded telemetry value is not used by the local logging provider shown in the active bundle.
AI rationale
Source inspection found no lifecycle hooks or confirmed attack behavior. The encoded string is associated with telemetry initialization, while the active telemetry provider logs locally and Insights requests use the configured UiPath authority.
Evidence
package.jsondist/tool.jsdist/index.jsdist/tool-7f3tt7bw.jsdist/index-sby22td6.js
Network endpoints1
cloud.uipath.com
Decision evidence
public snapshotAI called this Clean at 94.0% confidence as Benign with low false-positive risk.
Evidence for AI clean decision
- package.json points the package entrypoints to the inspected tool bundle and CLI.
- The CLI parses user-supplied commands before registering execution.
- The flagged encoded value is in telemetry initialization; the active telemetry provider logs events locally.
- Insights requests use routes built from the configured UiPath authority; the authority is HTTPS-validated.
- The other flagged bundle begins with imports for bundled utility dependencies.
Evidence against
Behavioral surface
ChildProcessCryptoEnvironmentVarsFilesystemNetwork
HighEntropyStringsUrlStrings
NoLicense
Source & flagged code
6 flagged · loading sourcedist/tool-7f3tt7bw.jsView file
4051var telemetryInstanceSlot = singleton("TelemetryService");
L4052: var DEFAULT_AI_CONNECTION_STRING = atob("[redacted]...
L4053: function getGlobalTelemetryInstance() {
High
Base64 Obscured Url
Source decodes a Base64-obscured HTTP endpoint at runtime.
dist/tool-7f3tt7bw.jsView on unpkg · L40516217const path2 = buildRoutePath(routeKey, route.template, config, request.pathParams ?? {});
const url = `${config.baseUrl}/${encodePathSegment(routeKey, "organizationId", config.organizationId)}/${encodePathSegment(routeKey, "tenantName", config.te
Medium
Stripped Provenance Metadata
Insights requests use routes built from the configured UiPath authority; the authority is HTTPS-validated.
dist/tool-7f3tt7bw.jsView on unpkg · L62174050// ../common/src/telemetry/telemetry-init.ts
var telemetryInstanceSlot = singleton("TelemetryService");
var DEFAULT_AI_CONNECTION_STRING = atob("[redacted]
Low
Ai Review Evidence
The CLI parses user-supplied commands before registering execution.
dist/tool-7f3tt7bw.jsView on unpkg · L4050Findings
2 High3 Medium7 Low
HighBase64 Obscured Urldist/tool-7f3tt7bw.js
HighSemantic Analysis Limiteddist/index-sby22td6.js
MediumNetwork
MediumEnvironment Vars
MediumStripped Provenance Metadatadist/tool-7f3tt7bw.js
LowFilesystem
LowHigh Entropy Strings
LowUrl Strings
LowNo License
LowAi Review Evidencepackage.json
LowAi Review Evidencedist/tool-7f3tt7bw.js
LowSuspicious Dependency Evidencedist/index-sby22td6.js
Affected versions and remediation
This report applies to @uipath/insights-tool@1.203.0.
See all versions of @uipath/insights-tool for other recorded verdicts.
- Review the evidence and your use of @uipath/insights-tool@1.203.0 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.