registry / @uipath/rpa-legacy-tool / 1.200.0

@uipath/rpa-legacy-tool@1.200.0

uipcli plugin for validating, analyzing and building RPA projects using the legacy UiPath CLI

AI Security Review

scanned 28d ago · by lpm-firewall-ai

Static inspection found a normal command-line integration with explicit command registration and package-aligned retrieval. No malicious behavior was identified.

Static reason

One or more suspicious static signals were detected.; previous stored version diff introduced dangerous source

Trigger

A user runs the package command and selects an RPA operation.

Impact

No unconsented install-time execution, credential export, persistence, or destructive attack behavior was identified.

Mechanism

The tool may contact the UiPath NuGet feed and store its legacy CLI cache locally for its requested operations.

AI rationale

Static inspection found a normal command-line integration with explicit command registration and package-aligned retrieval. No malicious behavior was identified.

Evidence

.uipath/.cache/rpa-legacy-tool/26.4.0.3

Network endpoints1

pkgs.dev.azure.com/uipath/Public.Feeds/_packaging/UiPath-Official/nuget/v3/index.json

Decision evidence

public snapshot

AI called this Clean at 93.0% confidence as Benign with low false-positive risk.

Evidence for AI clean decision

The manifest defines module and command entry points and has no lifecycle hook.
The NuGet search is registered as an explicit command requiring a search option.
Legacy CLI retrieval uses the UiPath NuGet feed and a package-specific local cache.
The inspected filesystem helper performs local filesystem operations; no network operation was found there.

Evidence against

Behavioral surface

Source

ChildProcessCryptoEnvironmentVarsFilesystemNetwork

Supply chain

HighEntropyStringsUrlStrings

ManifestNo manifest risk signals triggered.

scanned 11 file(s), 580 KB of source, external domains: cloud.uipath.com, fonts.googleapis.com, fonts.gstatic.com, github.com, govcloud.uipath.us, npm.pkg.github.com, pkgs.dev.azure.com, www.w3.org

Source & flagged code

7 flagged

dist/tool-ajxgpeg5.jsView file

Lines 10751-10791javascript

10751 const bytes = new Uint8Array(8);

10752 let hex = "";

10753 do {

10754 crypto.getRandomValues(bytes);

10755 hex = "";

10756 for (const byte of bytes) {

10757 hex += byte.toString(16).padStart(2, "0");

10758 }

10759 } while (/^0+$/.test(hex));

10760 return hex;

10761 }

10762}

10763// ../common/src/telemetry/node-appinsights-telemetry-provider.ts

10764var providerSlot = singleton("TelemetryProvider");

10765

10766// ../common/src/telemetry/telemetry-spool.ts

10767var sidecarEntrySlot = singleton("TelemetrySidecarEntry");

10768var MAX_SPOOL_AGE_MS = 72 * 60 * 60 * 1000;

10769

10770// ../common/src/telemetry/telemetry-init.ts

10771var telemetryInstanceSlot = singleton("TelemetryService");

10772var DEFAULT_AI_CONNECTION_STRING = atob("SW5zdHJ1bWVudGF0aW9uS2V5PTliZDM3NDgyLTgxMGUtNDQyYS1hYWE2LWQzOGVmNjVjNjY3NDtJbmdlc3Rpb25FbmRwb2ludD1odHRwczovL3dlc3RldXJvcGUtNS5pbi5hcHBsaWNhdGlvbmluc2lnaHRzLmF6dXJlLmNvbS87TGl2ZUVuZHBvaW50PWh0dHBzOi8vd2VzdGV1cm9wZS5saXZlZGlhZ25vc3RpY3MubW9uaXRvci5henVyZS5jb20vO0FwcGxpY2F0aW9uSWQ9MzU2OTdlZjEtOGJkMC00ZjE5LWEyN2MtZDg3Y2NhYzY2ZDJj");

10773function getGlobalTelemetryInstance() {

High

Base64 Obscured Url

Source decodes a Base64-obscured HTTP endpoint at runtime.

dist/tool-ajxgpeg5.jsView on unpkg · L10771

10774 const existing = telemetryInstanceSlot.get();

10775 if (existing && typeof existing === "object" && "trackEvent" in existing && typeof existing.trackEvent === "function") {

10776 return existing;

10777 }

10778 return;

10779}

10780var _localTelemetryInstance;

10781function getTelemetryInstance() {

10782 const global = getGlobalTelemetryInstance();

10783 if (global)

10784 return global;

10785 if (!_localTelemetryInstance) {

10786 _localTelemetryInstance = new TelemetryService(new LoggerTelemetryProvider, new NodeContextStorage);

10787 }

10788 return _localTelemetryInstance;

10789}

10790var telemetry = new Proxy({}, {

10791 get(_, prop) {

Lines 11719-11759javascript

11719 }

11720 ScreenLogger.progress = progress;

11721})(ScreenLogger ||= {});

11722// ../common/src/sdk-user-agent.ts

11723var sdkUserAgentHostToken = singleton("SdkUserAgentHostToken");

11724// ../common/src/tool-provider.ts

11725var factorySlot = singleton

Lines 12294-12334javascript

12294 return packages.slice(0, limit).map(({ _hasActivities, ...pkg }) => pkg);

12295}

12296

12297// src/commands/find-package.ts

12298var FIND_PACKAGE_EXAMPLES = [

12299

dist/tool-kgh6csrz.jsView file

Lines 766-806javascript

766 stopped = true;

767 return;

768 }

769 const now = Date.now() / 1000;

770

package.jsonView file

Lines 1-34json

2 "name": "@uipath/rpa-legacy-tool",

3 "license": "MIT",

4 "version": "1.200.0",

5 "description": "uipcli plugin for validating, analyzing and building RPA projects using the legacy UiPath CLI",

Source & flagged code

7 flagged · loading source

dist/tool-ajxgpeg5.jsView file

10771var telemetryInstanceSlot = singleton("TelemetryService"); L10772: var DEFAULT_AI_CONNECTION_STRING = atob("[redacted]... L10773: function getGlobalTelemetryInstance() {

High

Base64 Obscured Url

Source decodes a Base64-obscured HTTP endpoint at runtime.

dist/tool-ajxgpeg5.jsView on unpkg · L10771

12314var registerFindPackageCommand = (program2) => { program2.command("find-package").description("Search for NuGet packages across all configured feeds by name or description").requiredOption("--query <search>", "Search term to match against package name and description").option("-l, --limit <count>", "Maximum number of results to return", "50").examples(FIND_PACKAGE_EXAMPLES).trackedAction(processContext, async (options) => {

Low

Ai Review Evidence

The NuGet search is registered as an explicit command requiring a search option.

dist/tool-ajxgpeg5.jsView on unpkg · L12314

11739function getCacheDir() { const fs = getFileSystem(); return fs.path.join(fs.env.homedir(), ".uipath", ".cache", "rpa-legacy-tool", LEGACY_CLI_VERSION); } async function resolvePackageBaseAddress() { const resp = await fetch(NUGET_V3_INDEX_URL, { signal: AbortSignal.timeout(DOWNLOAD_TIMEOUT_MS) }); if (!resp.ok) { throw new Error(`Failed to fetch NuGet v3 service index: ${resp.status} ${resp.statusText}`); } let index; try { index = await resp.json(); } cat

Findings

3 High2 Medium7 Low

HighBase64 Obscured Urldist/tool-ajxgpeg5.js

HighSemantic Analysis Limiteddist/tool-kgh6csrz.js

HighPrevious Version Dangerous Deltadist/tool-kgh6csrz.js

MediumNetwork

MediumEnvironment Vars

LowFilesystem

LowHigh Entropy Strings

LowUrl Strings

LowSuspicious Lifecycle Evidencepackage.json

LowAi Review Evidencedist/tool-ajxgpeg5.js

LowAi Review Evidencedist/tool-kgh6csrz.js

Affected versions and remediation

This report applies to @uipath/rpa-legacy-tool@1.200.0.

See all versions of @uipath/rpa-legacy-tool for other recorded verdicts.

Review the evidence and your use of @uipath/rpa-legacy-tool@1.200.0 before allowing it. Restrict the permissions described in this report.
Choose an independently verified alternative or release. This report does not establish that other versions are safe.

Evidence last updated: 2026-09-26 03:47:20.386Z (UTC).

Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.

AI Security Review

Decision evidence

Source & flagged code

Source & flagged code

Findings

Affected versions and remediation

Related packages

More from @uipath

Behavioral surface

Related packages

More from @uipath

Source & flagged code