registry / @uipath/maestro-tool / 1.200.0

@uipath/maestro-tool@1.200.0

Create, debug, and run Maestro projects and jobs.

AI Security Review

scanned 28d ago · by lpm-firewall-ai

The inspected entry metadata has no lifecycle scripts, and the observed network and worker behavior is user-invoked tooling functionality. No concrete malicious behavior was established.

Static reason

One or more suspicious static signals were detected.

Trigger

A user invokes the command-line tool or its publishing functionality.

Impact

No unconsented installation-time execution, credential harvesting, or malicious persistence was found.

Mechanism

The tool can upload a selected package to a configured feed and uses local callback and worker helpers.

AI rationale

The inspected entry metadata has no lifecycle scripts, and the observed network and worker behavior is user-invoked tooling functionality. No concrete malicious behavior was established.

Decision evidence

public snapshot

AI called this Clean at 89.0% confidence as Benign with low false-positive risk.

Evidence for AI clean decision

The package metadata exposes a library and an explicit command-line entry point, with no install lifecycle hook.
The authentication helper binds its callback listener to the configured redirect host and handles errors locally.
The publishing code requires a caller-provided feed destination and attaches an API key only when that destination configuration supplies one.
The required ELK bundle constructs a local worker factory from its bundled worker module.

Evidence against

Behavioral surface

Source

ChildProcessCryptoDynamicRequireEnvironmentVarsEvalFilesystemNetworkShell

Supply chain

HighEntropyStringsTelemetryUrlStrings

ManifestNo manifest risk signals triggered.

scanned 128 file(s), 18.9 MB of source, external domains: alpha.uipath.com, api.example.com, bpmn.io, cloud.uipath.com, docs.uipath.com, fonts.googleapis.com, fonts.gstatic.com, github.com, govcloud.uipath.us, json-schema.org, npm.pkg.github.com, purl.org, raw.githubusercontent.com, schemas.microsoft.com, schemas.openxmlformats.org, serverlessworkflow.io, uipath.com, uipath.org, www.eclipse.org, www.omg.org, www.w3.org

Source & flagged code

8 flagged

dist/packager-tool-87rnjsa9.jsView file

Lines 27-67javascript

27 ];

28 }

29}

30function settlePromiseLike(thenable) {

31 return Promise.resolve(thenable).then((data) => [undefined, data]).catch((error) => [

32 error instanceof Error ? error : new Error(String(error)),

33 undefined

34 ]);

35}

37// ../filesystem/src/node.ts

38import { randomUUID } from "node:crypto";

39import { existsSync } from "node:fs";

40import * as fs6 from "node:fs/promises";

41import * as os2 from "node:os";

42import * as path2 from "node:path";

44// ../../node_modules/open/index.js

45import process8 from "node:process";

46import path from "node:path";

47import { fileURLToPath } from "node:url";

48import childProcess3 from "node:child_process";

49import fs5, { constants as fsConstants2 } from "node:fs/promises";

High

Child Process

Package source references child process execution.

dist/packager-tool-87rnjsa9.jsView on unpkg · L47

51// ../../node_modules/wsl-utils/index.js

52import { promisify as promisify2 } from "node:util";

53import childProcess2 from "node:child_process";

54import fs4, { constants as fsConstants } from "node:fs/promises";

56// ../../node_modules/wsl-utils/node_modules/is-wsl/index.js

57import process2 from "node:process";

58import os from "node:os";

59import fs3 from "node:fs";

61// ../../node_modules/is-inside-container/index.js

62import fs2 from "node:fs";

64// ../../node_modules/is-inside-container/node_modules/is-docker/index.js

65import fs from "node:fs";

66var isDockerCached;

67function hasDockerEnv() {

dist/node-t69mfm5v.jsView file

Lines 10-50javascript

10 TargetFramework,

11 TemporaryStorageService,

12 ToolErrorCodes,

13 ToolResult,

14 ZipService,

15 toolsFactoryRepository,

16 translate

17} from "./packager-tool-0cn35xnr.js";

18import"./packager-tool-nkrmjr3a.js";

19import

dist/packager-tool-05gksq3e.jsView file

Lines 1478-1518javascript

1478 i18n: { key, params, ns: VALIDATION_NAMESPACE }

1479 };

1480}

1481function unwrapConditionExpression(value) {

1482 if (value == null

dist/packager-tool-hbkd8ytc.jsView file

767var require_command = __commonJS((exports) => { L768: var EventEmitter = __require("node:events").EventEmitter; L769: var childProcess = __require("node:child_process");

Medium

Dynamic Require

Package source references dynamic require/import behavior.

dist/packager-tool-hbkd8ytc.jsView on unpkg · L767

dist/tool-bskpqemd.jsView file

•path = dist/tool-bskpqemd.js kind = oversized_source_file sizeBytes = 11848057 magicHex = [redacted]

Medium

Oversized Source File

Package contains source files above the normal full-analysis size ceiling.

dist/tool-bskpqemd.jsView on unpkg

dist/elk.bundled-pydbzeez.jsView file

•stage = ast_semantic_analysis; reason = ast_path_work_budget_exceeded; limitedFiles = 3

High

Semantic Analysis Limited

A bounded semantic-analysis stage reached its safety limit; remaining detectors completed, but this package requires AI review.

dist/elk.bundled-pydbzeez.jsView on unpkg

Source & flagged code

8 flagged · loading source

dist/packager-tool-87rnjsa9.jsView file

47import { fileURLToPath } from "node:url"; L48: import childProcess3 from "node:child_process"; L49: import fs5, { constants as fsConstants2 } from "node:fs/promises";

High

Child Process

Package source references child process execution.

dist/packager-tool-87rnjsa9.jsView on unpkg · L47

dist/node-t69mfm5v.jsView file

2523} L2524: const execArgv = process9.execArgv ?? []; L2525: if (execArgv.includes("-e") || execArgv.includes("--eval") || execArgv.includes("-p") || execArgv.includes("--print")) {

High

Shell

Package source references shell execution.

dist/node-t69mfm5v.jsView on unpkg · L2523

30Cross-file remote execution chain: dist/node-t69mfm5v.js spawns dist/packager-tool-0cn35xnr.js; helper contains network access plus dynamic code execution. L30: import { fileURLToPath } from "node:url"; L31: import childProcess3 from "node:child_process"; L32: import fs5, { constants as fsConstants2 } from "node:fs/promises"; ... L1355: class CommanderError extends Error { L1356: constructor(exitCode, code, message) { L1357: super(message); ... L2109: this._outputConfiguration = { L2110: writeOut: (str) => process9.stdout.write(str), L2111: writeErr: (str) => process9.stderr.write(str), ... L3513: ]; L3514: executePowerShell.encodeCommand = (command) => Buffer2.from(command, "utf16le").toString("base64"); L3515: executePowerShell.escapeArgument = (value) => `'${String(value).replaceAll("'"

Findings

5 High5 Medium5 Low

HighChild Processdist/packager-tool-87rnjsa9.js

HighShelldist/node-t69mfm5v.js

HighCross File Remote Execution Contextdist/node-t69mfm5v.js

HighBase64 Obscured Urldist/node-t69mfm5v.js

HighSemantic Analysis Limiteddist/elk.bundled-pydbzeez.js

MediumDynamic Requiredist/packager-tool-hbkd8ytc.js

MediumNetwork

MediumEnvironment Vars

MediumOversized Source Filedist/tool-bskpqemd.js

MediumStructural Risk Force Deep Review

LowEvaldist/packager-tool-05gksq3e.js

LowFilesystem

LowHigh Entropy Strings

LowTelemetry

Affected versions and remediation

This report applies to @uipath/maestro-tool@1.200.0.

See all versions of @uipath/maestro-tool for other recorded verdicts.

Review the evidence and your use of @uipath/maestro-tool@1.200.0 before allowing it. Restrict the permissions described in this report.
Choose an independently verified alternative or release. This report does not establish that other versions are safe.

Evidence last updated: 2026-09-26 03:13:00.844Z (UTC).

Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.

AI Security Review

Decision evidence

Source & flagged code

Source & flagged code

Findings

Affected versions and remediation

Related packages

More from @uipath

Behavioral surface

Related packages

More from @uipath

Source & flagged code