registry / @uipath/rpa-legacy-tool / 1.196.0

@uipath/rpa-legacy-tool@1.196.0

uipcli plugin for validating, analyzing and building RPA projects using the legacy UiPath CLI

AI Security Review

scanned 19d ago · by lpm-firewall-ai

No confirmed malicious attack surface. The package is a UiPath CLI plugin whose risky primitives are activated by explicit CLI commands and align with RPA validation, packaging, debugging, auth, telemetry, and NuGet discovery.

Static reason

One or more suspicious static signals were detected.

Trigger

User runs rpa-legacy CLI commands such as validate, pack, debug, find-package, or login-related flows.

Impact

Expected CLI behavior: local project analysis/packaging/debugging, auth refresh, telemetry, and NuGet package lookup.

Mechanism

User-invoked CLI downloads/runs UiPath legacy tooling and calls UiPath/NuGet/Auth endpoints.

Rationale

Static inspection shows a bundled, command-oriented UiPath tool; suspicious primitives are attributable to normal CLI responsibilities and are not triggered at install or import for unconsented behavior. No concrete malicious exfiltration, persistence, destructive action, staged payload, or AI-agent manipulation was found.

Evidence

package.jsondist/index.jsdist/tool.js.uipath/.auth.uipath/.cache/rpa-legacy-tool/26.4.0.3/UiPath.CLI.Windows.Legacy.26.4.0.3.nupkg.uipath/.cache/rpa-legacy-tool/26.4.0.3/legacy-cli/tools/uipcli.exe%APPDATA%/NuGet/NuGet.Config

Network endpoints5

cloud.uipath.comlocalhost:8104/oidc/login/uipath/Public.Feeds/_packaging/UiPath-Official/nuget/v3/index.json

@uipath/rpa-legacy-tool@1.196.0

AI Security Review

Decision evidence

Source & flagged code

Source & flagged code

Findings

Source & flagged code