registry / @uipath/rpa-legacy-tool / 1.201.0

@uipath/rpa-legacy-tool@1.201.0

uipcli plugin for validating, analyzing and building RPA projects using the legacy UiPath CLI

AI Security Review

scanned 2mo ago · by lpm-firewall-ai

The package is a user-invoked legacy UiPath CLI wrapper with no lifecycle execution. Its remote binary retrieval is a supply-chain consideration, but the source shows no concrete malicious behavior.

Static reason

One or more suspicious static signals were detected.

Trigger

The user runs an rpa-legacy command such as debug.

Impact

The invoked tool can run the downloaded legacy CLI with user-supplied project inputs.

Mechanism

Download, cache, extract, and execute the UiPath legacy CLI.

AI rationale

The package is a user-invoked legacy UiPath CLI wrapper with no lifecycle execution. Its remote binary retrieval is a supply-chain consideration, but the source shows no concrete malicious behavior.

Evidence

.uipath/.cache/rpa-legacy-tool

Network endpoints1

pkgs.dev.azure.com

Decision evidence

public snapshot

AI called this Clean at 90.0% confidence as Benign with low false-positive risk.

Evidence for AI clean decision

The package exposes a command-line entry point.
A user-invoked command downloads and extracts a UiPath legacy CLI archive, then runs it.
A bundled browser-opening helper can spawn an operating-system command.

Evidence against

package.json has no preinstall, install, or postinstall lifecycle hook.
The legacy binary download occurs inside command handlers after explicit CLI invocation.
The download source is a UiPath Azure DevOps feed and the cache path is package-specific.
No self-dependency, credential exfiltration path, destructive action, or reviewer-directed text was found.

Behavioral surface

Source

ChildProcessCryptoEnvironmentVarsFilesystemNetworkShell

Supply chain

HighEntropyStringsUrlStrings

ManifestNo manifest risk signals triggered.

scanned 14 file(s), 589 KB of source, external domains: cloud.uipath.com, fonts.googleapis.com, fonts.gstatic.com, github.com, govcloud.uipath.us, npm.pkg.github.com, pkgs.dev.azure.com, www.w3.org

Source & flagged code

6 flagged

dist/tool-5n23zg2k.jsView file

Lines 5705-5745javascript

5705 crypto.getRandomValues(bytes);

5706 hex = "";

5707 for (const byte of bytes) {

5708 hex += byte.toString(16).padStart(2, "0");

5709 }

5710 } while (/^0+$/.test(hex));

5711 return hex;

5712 }

5713}

5714// ../common/src/telemetry/proxy-http-agent.ts

5715var slot = singleton("ProxyAuthHttpsAgent");

5716

5717// ../common/src/telemetry/node-appinsights-telemetry-provider.ts

5718var providerSlot = singleton("TelemetryProvider");

5719

5720// ../common/src/telemetry/telemetry-spool.ts

5721var sidecarEntrySlot = singleton("TelemetrySidecarEntry");

5722var MAX_SPOOL_AGE_MS = 72 * 60 * 60 * 1000;

5723

5724// ../common/src/telemetry/telemetry-init.ts

5725var telemetryInstanceSlot = singleton("TelemetryService");

5726var DEFAULT_AI_CONNECTION_STRING = atob("SW5zdHJ1bWVudGF0aW9uS2V5PTliZDM3NDgyLTgxMGUtNDQyYS1hYWE2LWQzOGVmNjVjNjY3NDtJbmdlc3Rpb25FbmRwb2ludD1odHRwczovL3dlc3RldXJvcGUtNS5pbi5hcHBsaWNhdGlvbmluc2lnaHRzLmF6dXJlLmNvbS87TGl2ZUVuZHBvaW50PWh0dHBzOi8vd2VzdGV1cm9wZS5saXZlZGlhZ25vc3RpY3MubW9uaXRvci5henVyZS5jb20vO0FwcGxpY2F0aW9uSWQ9MzU2OTdlZjEtOGJkMC00ZjE5LWEyN2MtZDg3Y2NhYzY2ZDJj");

5727function getGlobalTelemetryInstance() {

High

Base64 Obscured Url

Source decodes a Base64-obscured HTTP endpoint at runtime.

dist/tool-5n23zg2k.jsView on unpkg · L5725

5728 const existing = telemetryInstanceSlot.get();

5729 if (existing && typeof existing === "object" && "trackEvent" in existing && typeof existing.trackEvent === "function") {

5730 return existing;

5731 }

5732 return;

5733}

5734var _localTelemetryInstance;

5735function getTelemetryInstance() {

5736 const global = getGlobalTelemetryInstance();

5737 if (global)

5738 return global;

5739 if (!_localTelemetryInstance) {

5740 _localTelemetryInstance = new TelemetryService(new LoggerTelemetryProvider, new NodeContextStorage);

5741 }

5742 return _localTelemetryInstance;

5743}

5744var telemetry = new Proxy({}, {

5745 get(_, prop) {

Lines 6680-6763javascript

6680// ../common/src/screen-logger.ts

6681var ScreenLogger;

6682((ScreenLogger) => {

6683 function progress(message) {

6684 getOutputSink().writeErr(`${message}

6685`

dist/index-w03qc9m8.jsView file

Lines 478-518javascript

478 if (app) {

479 command = app;

480 } else {

481 const isBundled = !__dirname2 || __dirname2 === "/";

package.jsonView file

Lines 1-34json

2 "name": "@uipath/rpa-legacy-tool",

3 "license": "MIT",

4 "version": "1.201.0",

5 "description": "uipcli plugin for validating, analyzing and building RPA projects using the legacy UiPath CLI",

Source & flagged code

6 flagged · loading source

dist/tool-5n23zg2k.jsView file

5725var telemetryInstanceSlot = singleton("TelemetryService"); L5726: var DEFAULT_AI_CONNECTION_STRING = atob("[redacted]... L5727: function getGlobalTelemetryInstance() {

High

Base64 Obscured Url

Source decodes a Base64-obscured HTTP endpoint at runtime.

dist/tool-5n23zg2k.jsView on unpkg · L5725

6700var LEGACY_CLI_EXECUTABLE = "uipcli.exe"; var LEGACY_CLI_PACKAGE_ID = "UiPath.CLI.Windows.Legacy"; var LEGACY_CLI_VERSION = "26.4.0.3"; var NUGET_V3_INDEX_URL = "https://pkgs.dev.azure.com/uipath/Public.Feeds/_packaging/UiPath-Official/nuget/v3/index.json"; var DOWNLOAD_TIMEOUT_MS = 300000;

Low

Ai Review Evidence

A user-invoked command downloads and extracts a UiPath legacy CLI archive, then runs it.

dist/tool-5n23zg2k.jsView on unpkg · L6700

6743async function resolveLegacyCliPath() { const fs = getFileSystem(); const cacheDir = getCacheDir(); const extractDir = fs.path.join(cacheDir, "legacy-cli"); const exe = fs.path.join(extractDir, "tools", LEGACY_CLI_EXECUTABLE); if (await fs.exists(exe)) { return exe; } await fs.mkdir(cacheDir); const nupkgPath = fs.path.join(cacheDir, `${LEGACY_CLI_PACKAGE_ID}.${LEGACY_CLI_VERSION}.nupkg`); if (!await fs.exists(nupkgPath)) { await downloadNupkg(nupkgPath); } logger.info("Extracting legacy CLI from nupkg (first run)..."); await fs.mkdir(extractDir); const zip =

Findings

2 High2 Medium7 Low

HighBase64 Obscured Urldist/tool-5n23zg2k.js

HighSemantic Analysis Limiteddist/index-w03qc9m8.js

MediumNetwork

MediumEnvironment Vars

LowFilesystem

LowHigh Entropy Strings

LowUrl Strings

LowAi Review Evidencepackage.json

LowAi Review Evidencedist/tool-5n23zg2k.js

LowAi Review Evidencedist/index-w03qc9m8.js

Affected versions and remediation

This report applies to @uipath/rpa-legacy-tool@1.201.0.

See all versions of @uipath/rpa-legacy-tool for other recorded verdicts.

Review the evidence and your use of @uipath/rpa-legacy-tool@1.201.0 before allowing it. Restrict the permissions described in this report.
Choose an independently verified alternative or release. This report does not establish that other versions are safe.

Evidence last updated: 2026-09-07 13:45:12.332Z (UTC).

Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.

AI Security Review

Decision evidence

Source & flagged code

Source & flagged code

Findings

Affected versions and remediation

Related packages

More from @uipath

Behavioral surface

Related packages

More from @uipath

Source & flagged code