Skip to main content

Threat feed How it works Policy

Threat feed How it works Policy

Loading npm security reports…

@uipath/resourcecatalog-tool: Clean npm security report (Allow) | LPM Firewall

Skip to main content

Threat feed How it works Policy

Threat feed How it works Policy

Passed — safe to install

No malicious behavior detected. 9 low-signal pattern(s) reviewed.

View on npm All versions

registry / @uipath/resourcecatalog-tool / 1.196.0

@uipath/resourcecatalog-tool@1.196.0

CLI plugin for the UiPath Resource Catalog Service.

AI Security Review

scanned 19d ago · by lpm-firewall-ai

No confirmed malicious attack surface. The package is a UiPath Resource Catalog CLI that authenticates with UiPath, refreshes stored UiPath credentials, calls Resource Catalog APIs, and may emit telemetry.

Static reason

One or more suspicious static signals were detected.

Trigger

User runs the resourcecatalog-tool CLI or imports/registers its commands.

Impact

Uses existing UiPath credentials for intended Resource Catalog requests; no unrelated exfiltration or install-time execution found.

Mechanism

UiPath-authenticated CLI API calls and telemetry

Rationale

Static source inspection shows a bundled UiPath CLI plugin with expected auth, token refresh, Resource Catalog API calls, telemetry, and platform helper code. Suspicious primitives are package-aligned and user-invoked, with no concrete malicious behavior or install-time execution found.

Evidence

package.jsondist/tool.jsdist/index.js~/.uipath/.auth<auth-file>.lock<auth-file>.tmp

Network endpoints5

cloud.uipath.com/identity_/connect/token/resourcecatalog_westeurope-5.in.applicationinsights.azure.com/westeurope.livediagnostics.monitor.azure.com/

© 2026 LPM Firewall

Product

Threat feed How it works Policy

LPM

LPM.dev Registry

Decision evidence

public snapshot

AI called this Clean at 90.0% confidence as Benign with low false-positive risk.

Evidence for block

dist/tool.js and dist/index.js contain child_process use for bundled open/default-browser/registry helpers, but no install hook invokes them.
dist/tool.js has a base64 Application Insights connection string for UiPath telemetry endpoints.
dist/tool.js reads/writes ~/.uipath/.auth and refreshes UiPath tokens during CLI authentication flows.

Evidence against

package.json has no lifecycle scripts; only main ./dist/tool.js and bin ./dist/index.js.
CLI commands are Resource Catalog operations: rcs search and rcs tag list in dist/tool.js.
Network calls are to user-configured UiPath HTTPS authority, /identity_/connect/token, /resourcecatalog_, and Microsoft Application Insights telemetry.
No evidence of credential harvesting to unrelated hosts, persistence, destructive behavior, or reviewer/AI-agent control-surface writes.
Robot credential fallback uses UiPath IPC names and prints a notice; access token is used for UiPath API client creation.

Behavioral surface

Source

ChildProcessCryptoEnvironmentVarsFilesystemNativeBindingsNetworkShell

Supply chain

HighEntropyStringsUrlStrings

ManifestNo manifest risk signals triggered.

scanned 2 file(s), 2.24 MB of source, external domains: cloud.uipath.com, github.com, govcloud.uipath.us, npm.pkg.github.com

Source & flagged code

4 flagged · loading source

dist/index.jsView file

757var EventEmitter = __require("node:events").EventEmitter; L758: var childProcess = __require("node:child_process"); L759: var path = __require("node:path");

High

Child Process

Package source references child process execution.

dist/index.jsView on unpkg · L757

1217} L1218: const execArgv = process2.execArgv ?? []; L1219: if (execArgv.includes("-e") || execArgv.includes("--eval") || execArgv.includes("-p") || execArgv.includes("--print")) {

High

Shell

Package source references shell execution.

dist/index.jsView on unpkg · L1217

39Cross-file remote execution chain: dist/index.js spawns dist/tool.js; helper contains network access plus dynamic code execution. L39: class CommanderError extends Error { L40: constructor(exitCode, code, message) { L41: super(message); ... L757: var EventEmitter = __require("node:events").EventEmitter; L758: var childProcess = __require("node:child_process"); L759: var path = __require("node:path"); ... L803: this._outputConfiguration = { L804: writeOut: (str) => process2.stdout.write(str), L805: writeErr: (str) => process2.stderr.write(str), ... L2232: ]; L2233: executePowerShell.encodeCommand = (command) => Buffer2.from(command, "utf16le").toString("base64"); L2234: executePowerShell.escapeArgument = (value) => `'${String(value).replaceAll("'", "''")}'`;

High

Cross File Remote Execution Context

Source spawns a local helper that also contains network and dynamic execution context; review data flow before blocking.

dist/index.jsView on unpkg · L39

26732var telemetryInstanceSlot = singleton("TelemetryService"); L26733: var DEFAULT_AI_CONNECTION_STRING = atob("[redacted]... L26734: function getGlobalTelemetryInstance() {

High

Base64 Obscured Url

Source decodes a Base64-obscured HTTP endpoint at runtime.

dist/index.jsView on unpkg · L26732

Findings

4 High2 Medium3 Low

HighChild Processdist/index.js

HighShelldist/index.js

HighCross File Remote Execution Contextdist/index.js

HighBase64 Obscured Urldist/index.js

MediumNetwork

MediumEnvironment Vars

LowFilesystem

LowHigh Entropy Strings

LowUrl Strings

90%Pass

Verdict confidence

IntentBenign

False-positive riskLow

Review stagesource_first_review

Firewall policyNo policy match

Package metadata

npm

Maintainersqbrandon, mihhdu, toxik +9

Version1.197.0

PublishedJun 22, 2026

LicenseMIT

Dependencies0

Integrityverified

Package size375 KB

Files3

Keywordscli-tool

LinksRepository Homepage Issues

Runtime surface

package.json

Entrypointsmain → ./dist/tool.jsexports mapbin → resourcecatalog-tool

RuntimeNo engine / OS / CPU constraints

Artifact2.24 MB · 3 files1 signature(s)

Install lifecycleNo scripts declared.

Behavioral surface

ChildProcessCryptoEnvironmentVarsFilesystemNativeBindingsNetworkShellHighEntropyStringsUrlStringsManifest: clean

LPM CLI

Source & flagged code

4 flagged

dist/index.jsView file

757var EventEmitter = __require("node:events").EventEmitter; L758: var childProcess = __require("node:child_process"); L759: var path = __require("node:path");

High

Child Process

Package source references child process execution.

dist/index.jsView on unpkg · L757

1217} L1218: const execArgv = process2.execArgv ?? []; L1219: if (execArgv.includes("-e") || execArgv.includes("--eval") || execArgv.includes("-p") || execArgv.includes("--print")) {

High

Shell

Package source references shell execution.

dist/index.jsView on unpkg · L1217

39Cross-file remote execution chain: dist/index.js spawns dist/tool.js; helper contains network access plus dynamic code execution. L39: class CommanderError extends Error { L40: constructor(exitCode, code, message) { L41: super(message); ... L757: var EventEmitter = __require("node:events").EventEmitter; L758: var childProcess = __require("node:child_process"); L759: var path = __require("node:path"); ... L803: this._outputConfiguration = { L804: writeOut: (str) => process2.stdout.write(str), L805: writeErr: (str) => process2.stderr.write(str), ... L2232: ]; L2233: executePowerShell.encodeCommand = (command) => Buffer2.from(command, "utf16le").toString("base64"); L2234: executePowerShell.escapeArgument = (value) => `'${String(value).replaceAll("'", "''")}'`;

High

Cross File Remote Execution Context

Source spawns a local helper that also contains network and dynamic execution context; review data flow before blocking.

dist/index.jsView on unpkg · L39

26732var telemetryInstanceSlot = singleton("TelemetryService"); L26733: var DEFAULT_AI_CONNECTION_STRING = atob("[redacted]... L26734: function getGlobalTelemetryInstance() {

High

Base64 Obscured Url

Source decodes a Base64-obscured HTTP endpoint at runtime.

dist/index.jsView on unpkg · L26732