registry / @uipath/resourcecatalog-tool / 1.202.1

@uipath/resourcecatalog-tool@1.202.1

CLI plugin for the UiPath Resource Catalog Service.

AI Security Review

scanned 28d ago · by lpm-firewall-ai

Inspection shows a UiPath CLI with no lifecycle hooks and token exchange only to the HTTPS authority the user or default cloud host selects. Browser and registry process calls are local helpers for login and telemetry, not a hidden payload.

Static reason

One or more suspicious static signals were detected.

Trigger

A user runs the resourcecatalog-tool binary or imports registerCommands.

Impact

No unconsented credential theft, exfiltration, persistence, or agent-control mutation was found.

Mechanism

Commands call the Resource Catalog API after OIDC login or refresh against the configured authority. There is no install-time execution.

AI rationale

Network endpoints1

cloud.uipath.com

Decision evidence

public snapshot

AI called this Clean at 86.0% confidence as Benign with low false-positive risk.

Evidence for AI clean decision

package.json declares a public ESM CLI plugin with main and bin entries and no install lifecycle scripts.
The exported command registrar only adds Resource Catalog search and tag commands that run when the user invokes the CLI.
Auth posts the refresh token to the configured HTTPS UiPath authority at /identity_/connect/token, defaulting to cloud.uipath.com.
dist/index-xnzgkhtg.js is the bundled open helper that launches the local browser for interactive login.

Evidence against

child_process is used only to query the Windows UiPath analytics registry value and by the open helper to start the OS browser.
No eval, dynamic code loading, remote payload fetch, or agent-config writes appear in the package.

Behavioral surface

Source

ChildProcessCryptoEnvironmentVarsFilesystemNetwork

Supply chain

HighEntropyStringsUrlStrings

Manifest

Source & flagged code

6 flagged

dist/tool-pxe8gjqr.jsView file

Lines 4338-4378javascript

4338 }

4339 getState().commandStart = performance.now();

4340}

4341function recordCommandDuration(durationMs) {

4342 if (!timingsEnabled()) {

4343 return;

4344 }

4345 getState().commandMs = durationMs;

4346}

4347// ../../common/src/telemetry/proxy-http-agent.ts

4348var slot = singleton("ProxyAuthHttpsAgent");

4349

4350// ../../common/src/telemetry/node-appinsights-telemetry-provider.ts

4351var providerSlot = singleton("TelemetryProvider");

4352

4353// ../../common/src/telemetry/telemetry-spool.ts

4354var sidecarEntrySlot = singleton("TelemetrySidecarEntry");

4355var MAX_SPOOL_AGE_MS = 72 * 60 * 60 * 1000;

4356

4357// ../../common/src/telemetry/telemetry-init.ts

4358var telemetryInstanceSlot = singleton("TelemetryService");

4359var DEFAULT_AI_CONNECTION_STRING = atob("SW5zdHJ1bWVudGF0aW9uS2V5PTliZDM3NDgyLTgxMGUtNDQyYS1hYWE2LWQzOGVmNjVjNjY3NDtJbmdlc3Rpb25FbmRwb2ludD1odHRwczovL3dlc3RldXJvcGUtNS5pbi5hcHBsaWNhdGlvbmluc2lnaHRzLmF6dXJlLmNvbS87TGl2ZUVuZHBvaW50PWh0dHBzOi8vd2VzdGV1cm9wZS5saXZlZGlhZ25vc3RpY3MubW9uaXRvci5henVyZS5jb20vO0FwcGxpY2F0aW9uSWQ9MzU2OTdlZjEtOGJkMC00ZjE5LWEyN2MtZDg3Y2NhYzY2ZDJj");

4360function getGlobalTelemetryInstance() {

High

Base64 Obscured Url

Source decodes a Base64-obscured HTTP endpoint at runtime.

dist/tool-pxe8gjqr.jsView on unpkg · L4358

4361 const existing = telemetryInstanceSlot.get();

4362 if (existing && typeof existing === "object" && "trackEvent" in existing && typeof existing.trackEvent === "function") {

4363 return existing;

4364 }

4365 return;

4366}

4367function setGlobalTelemetryInstance(instance) {

4368 telemetryInstanceSlot.set(instance);

4369}

4370var _localTelemetryInstance;

4371function getTelemetryInstance() {

4372 const global = getGlobalTelemetryInstance();

4373 if (global)

4374 return global;

4375 if (!_localTelemetryInstance) {

4376 _localTelemetryInstance = new TelemetryService(new LoggerTelemetryProvider, new NodeContextStorage);

4377 setGlobalTelemetryInstance(_localTelemetryInstance);

4378 }

Lines 7507-7547javascript

7507 let baseUrl = rawUrl;

7508 if (baseUrl.endsWith("/identity_/")) {

7509 baseUrl = baseUrl.slice(0, -11);

7510 } else if (baseUrl.endsWith

Lines 8996-9030javascript

8996 Code: "RcsTagList",

8997 Data: result

8998 });

8999 });

9000};

9001

9002// src/commands/rcs.ts

9003var registerRcsCommand = (program2) =>

dist/index-xnzgkhtg.jsView file

•stage = ast_semantic_analysis; reason = ast_alias_growth_limit_exceeded; limitedFiles = 1

High

Semantic Analysis Limited

A bounded semantic-analysis stage reached its safety limit; remaining detectors completed, but this package requires AI review.

dist/index-xnzgkhtg.jsView on unpkg

package.jsonView file

Lines 1-31json

2 "name": "@uipath/resourcecatalog-tool",

3 "license": "SEE LICENSE IN LICENSE.txt",

4 "version": "1.202.1",

5 "description": "CLI plugin for the UiPath Resource Catalog Service.",

Source & flagged code

6 flagged · loading source

dist/tool-pxe8gjqr.jsView file

4358var telemetryInstanceSlot = singleton("TelemetryService"); L4359: var DEFAULT_AI_CONNECTION_STRING = atob("[redacted]... L4360: function getGlobalTelemetryInstance() {

High

Base64 Obscured Url

Source decodes a Base64-obscured HTTP endpoint at runtime.

dist/tool-pxe8gjqr.jsView on unpkg · L4358

7527if (url.protocol !== "https:") { throw new InvalidBaseUrlError(baseUrl, `Authority must use https:// scheme, got ${url.protocol}//. OIDC token exchange re

Medium

Stripped Provenance Metadata

Auth posts the refresh token to the configured HTTPS UiPath authority at /identity_/connect/token, defaulting to cloud.uipath.com.

dist/tool-pxe8gjqr.jsView on unpkg · L7527

9016// src/tool.ts var metadata = { name: "resourcecatalog-tool", version: package_default.version, description: "Manage UiPath Resource Catalog Service resources.", commandPre

Low

Ai Review Evidence

The exported command registrar only adds Resource Catalog search and tag commands that run when the user invokes the CLI.

dist/tool-pxe8gjqr.jsView on unpkg · L9016

Findings

2 High3 Medium7 Low

HighBase64 Obscured Urldist/tool-pxe8gjqr.js

HighSemantic Analysis Limiteddist/index-xnzgkhtg.js

MediumNetwork

MediumEnvironment Vars

MediumStripped Provenance Metadatadist/tool-pxe8gjqr.js

LowFilesystem

LowHigh Entropy Strings

LowUrl Strings

LowNo License

LowSuspicious Lifecycle Evidencepackage.json

LowAi Review Evidencedist/tool-pxe8gjqr.js

Affected versions and remediation

This report applies to @uipath/resourcecatalog-tool@1.202.1.

See all versions of @uipath/resourcecatalog-tool for other recorded verdicts.

Review the evidence and your use of @uipath/resourcecatalog-tool@1.202.1 before allowing it. Restrict the permissions described in this report.
Choose an independently verified alternative or release. This report does not establish that other versions are safe.

Evidence last updated: 2026-09-26 03:49:32.933Z (UTC).

Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.

AI Security Review

Decision evidence

Source & flagged code

Source & flagged code

Findings

Affected versions and remediation

Related packages

More from @uipath

Behavioral surface

Related packages

More from @uipath

Source & flagged code