registry / @uipath/rpa-legacy-tool / 1.202.0

@uipath/rpa-legacy-tool@1.202.0

uipcli plugin for validating, analyzing and building RPA projects using the legacy UiPath CLI

AI Security Review

scanned 28d ago · by lpm-firewall-ai

Lifecycle hooks, credential theft, and foreign agent-control writes are absent. Downloading and spawning the official legacy CLI is user-invoked and matches the package purpose.

Static reason

One or more suspicious static signals were detected.; previous stored version diff introduced dangerous source

Trigger

The user runs the rpa-legacy-tool binary or imports the module.

Impact

Effects stay within the stated RPA build and analysis workflow. Install does not mutate foreign agent configuration or run hidden code.

Mechanism

On Windows it caches UiPath.CLI.Windows.Legacy 26.4.0.3 from the UiPath-Official NuGet feed, extracts uipcli.exe, and spawns it with the user's command arguments.

AI rationale

Lifecycle hooks, credential theft, and foreign agent-control writes are absent. Downloading and spawning the official legacy CLI is user-invoked and matches the package purpose.

Network endpoints1

pkgs.dev.azure.com/uipath/Public.Feeds/_packaging/UiPath-Official/nuget/v3/index.json

Decision evidence

public snapshot

AI called this Clean at 86.0% confidence as Benign with low false-positive risk.

Evidence for AI clean decision

package.json names a uipcli RPA plugin, exposes only dist/tool.js and the rpa-legacy-tool bin, and declares no install lifecycle scripts.
Command code downloads the pinned UiPath.CLI.Windows.Legacy package from the official UiPath NuGet feed and spawns the cached uipcli.exe only when the CLI runs.
child_process imports in dist/index-sby22td6.js come from the bundled open/wsl-utils libraries, not an install hook.

Evidence against

No preinstall, install, or postinstall hook is present.
Network use is the documented UiPath NuGet feed and user-supplied Orchestrator login, not a hidden recipient.

Behavioral surface

Source

ChildProcessCryptoEnvironmentVarsFilesystemNetworkShell

Supply chain

HighEntropyStringsUrlStrings

Manifest

NoLicense

scanned 14 file(s), 600 KB of source, external domains: cloud.uipath.com, fonts.googleapis.com, fonts.gstatic.com, github.com, govcloud.uipath.us, npm.pkg.github.com, pkgs.dev.azure.com, www.w3.org

Source & flagged code

6 flagged

dist/tool-t15txcwg.jsView file

Lines 6265-6305javascript

6265 }

6266 getState().commandStart = performance.now();

6267}

6268function recordCommandDuration(durationMs) {

6269 if (!timingsEnabled()) {

6270 return;

6271 }

6272 getState().commandMs = durationMs;

6273}

6274// ../common/src/telemetry/proxy-http-agent.ts

6275var slot = singleton("ProxyAuthHttpsAgent");

6276

6277// ../common/src/telemetry/node-appinsights-telemetry-provider.ts

6278var providerSlot = singleton("TelemetryProvider");

6279

6280// ../common/src/telemetry/telemetry-spool.ts

6281var sidecarEntrySlot = singleton("TelemetrySidecarEntry");

6282var MAX_SPOOL_AGE_MS = 72 * 60 * 60 * 1000;

6283

6284// ../common/src/telemetry/telemetry-init.ts

6285var telemetryInstanceSlot = singleton("TelemetryService");

6286var DEFAULT_AI_CONNECTION_STRING = atob("SW5zdHJ1bWVudGF0aW9uS2V5PTliZDM3NDgyLTgxMGUtNDQyYS1hYWE2LWQzOGVmNjVjNjY3NDtJbmdlc3Rpb25FbmRwb2ludD1odHRwczovL3dlc3RldXJvcGUtNS5pbi5hcHBsaWNhdGlvbmluc2lnaHRzLmF6dXJlLmNvbS87TGl2ZUVuZHBvaW50PWh0dHBzOi8vd2VzdGV1cm9wZS5saXZlZGlhZ25vc3RpY3MubW9uaXRvci5henVyZS5jb20vO0FwcGxpY2F0aW9uSWQ9MzU2OTdlZjEtOGJkMC00ZjE5LWEyN2MtZDg3Y2NhYzY2ZDJj");

6287function getGlobalTelemetryInstance() {

High

Base64 Obscured Url

Source decodes a Base64-obscured HTTP endpoint at runtime.

dist/tool-t15txcwg.jsView on unpkg · L6285

6288 const existing = telemetryInstanceSlot.get();

6289 if (existing && typeof existing === "object" && "trackEvent" in existing && typeof existing.trackEvent === "function") {

6290 return existing;

6291 }

6292 return;

6293}

6294function setGlobalTelemetryInstance(instance) {

6295 telemetryInstanceSlot.set(instance);

6296}

6297var _localTelemetryInstance;

6298function getTelemetryInstance() {

6299 const global = getGlobalTelemetryInstance();

6300 if (global)

6301 return global;

6302 if (!_localTelemetryInstance) {

6303 _localTelemetryInstance = new TelemetryService(new LoggerTelemetryProvider, new NodeContextStorage);

6304 setGlobalTelemetryInstance(_localTelemetryInstance);

6305 }

Lines 7603-7643javascript

7603 "cancelled",

7604 "canceled",

7605 "stopped"

7606]);

7607// ../common/src/screen-logger.ts

7608var ScreenLogger;

7609((ScreenLogger) => {

7610 function progress

dist/index-sby22td6.jsView file

•stage = ast_semantic_analysis; reason = ast_alias_growth_limit_exceeded; limitedFiles = 1

High

Semantic Analysis Limited

A bounded semantic-analysis stage reached its safety limit; remaining detectors completed, but this package requires AI review.

dist/index-sby22td6.jsView on unpkg

•matchType = previous_version_dangerous_delta matchedPackage = @uipath/rpa-legacy-tool@1.201.0 matchedIdentity = npm:QHVpcGF0aC9ycGEtbGVnYWN5LXRvb2w:1.201.0 similarity = 0.500 summary = stored previous version shares package body but lacks this dangerous source file

High

Previous Version Dangerous Delta

This package version adds a dangerous source file absent from the previous stored version; route for source-aware review.

dist/index-sby22td6.jsView on unpkg

package.jsonView file

Lines 1-34json

2 "name": "@uipath/rpa-legacy-tool",

3 "license": "SEE LICENSE IN LICENSE.txt",

4 "version": "1.202.0",

5 "description": "uipcli plugin for validating, analyzing and building RPA projects using the legacy UiPath CLI",

Source & flagged code

6 flagged · loading source

dist/tool-t15txcwg.jsView file

6285var telemetryInstanceSlot = singleton("TelemetryService"); L6286: var DEFAULT_AI_CONNECTION_STRING = atob("[redacted]... L6287: function getGlobalTelemetryInstance() {

High

Base64 Obscured Url

Source decodes a Base64-obscured HTTP endpoint at runtime.

dist/tool-t15txcwg.jsView on unpkg · L6285

7623child_process"; import { createWriteStream } from "node:fs"; import { pipeline } from "node:stream/promises"; var import_adm_zip = __toESM(require_adm_zip(), 1); var LEGACY_CLI_EXE

Low

Ai Review Evidence

Command code downloads the pinned UiPath.CLI.Windows.Legacy package from the official UiPath NuGet feed and spawns the cached uipcli.exe only when the CLI runs.

dist/tool-t15txcwg.jsView on unpkg · L7623

dist/index-sby22td6.jsView file

•stage = ast_semantic_analysis; reason = ast_alias_growth_limit_exceeded; limitedFiles = 1

High

Findings

3 High2 Medium7 Low

HighBase64 Obscured Urldist/tool-t15txcwg.js

HighSemantic Analysis Limiteddist/index-sby22td6.js

HighPrevious Version Dangerous Deltadist/index-sby22td6.js

MediumNetwork

MediumEnvironment Vars

LowFilesystem

LowHigh Entropy Strings

LowUrl Strings

LowNo License

LowSuspicious Lifecycle Evidencepackage.json

LowAi Review Evidencedist/tool-t15txcwg.js

Affected versions and remediation

This report applies to @uipath/rpa-legacy-tool@1.202.0.

See all versions of @uipath/rpa-legacy-tool for other recorded verdicts.

Review the evidence and your use of @uipath/rpa-legacy-tool@1.202.0 before allowing it. Restrict the permissions described in this report.
Choose an independently verified alternative or release. This report does not establish that other versions are safe.

Evidence last updated: 2026-09-26 03:47:24.972Z (UTC).

Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.

AI Security Review

Decision evidence

Source & flagged code

Source & flagged code

Findings

Affected versions and remediation

Related packages

More from @uipath

Behavioral surface

Related packages

More from @uipath

Source & flagged code