registry / @uipath/rpa-legacy-tool / 1.202.1

@uipath/rpa-legacy-tool@1.202.1

uipcli plugin for validating, analyzing and building RPA projects using the legacy UiPath CLI

AI Security Review

scanned 28d ago · by lpm-firewall-ai

The inspected entry points are user-invoked CLI code with no lifecycle hook. Remote retrieval is package-aligned and targets a fixed UiPath feed; no concrete malicious behavior was found.

Static reason

One or more suspicious static signals were detected.; previous stored version diff introduced dangerous source

Trigger

A user runs the package command and selects a command that needs the legacy CLI.

Impact

No unconsented install-time execution, credential theft, persistence, or destructive behavior was identified.

Mechanism

The command parser registers RPA operations; the legacy CLI resolver fetches the fixed UiPath NuGet feed.

AI rationale

The inspected entry points are user-invoked CLI code with no lifecycle hook. Remote retrieval is package-aligned and targets a fixed UiPath feed; no concrete malicious behavior was found.

Network endpoints1

pkgs.dev.azure.com/uipath/Public.Feeds/_packaging/UiPath-Official/nuget/v3/index.json

Decision evidence

public snapshot

AI called this Clean at 91.0% confidence as Benign with low false-positive risk.

Evidence for AI clean decision

The manifest exposes a module and command-line binary; the inspected manifest contains no lifecycle hooks.
The binary constructs its command program and parses supplied command-line arguments.
The main bundle registers RPA validation, build, debug, package-search, and type-inspection commands.
The legacy CLI download is tied to a fixed UiPath NuGet feed and named legacy CLI release.
The required auxiliary bundle exports browser-opening helpers only.

Evidence against

Behavioral surface

Source

ChildProcessCryptoEnvironmentVarsFilesystemNetwork

Supply chain

HighEntropyStringsUrlStrings

Manifest

NoLicense

scanned 14 file(s), 600 KB of source, external domains: cloud.uipath.com, fonts.googleapis.com, fonts.gstatic.com, github.com, govcloud.uipath.us, npm.pkg.github.com, pkgs.dev.azure.com, www.w3.org

Source & flagged code

6 flagged

dist/tool-1k6khwzd.jsView file

Lines 6265-6305javascript

6265 }

6266 getState().commandStart = performance.now();

6267}

6268function recordCommandDuration(durationMs) {

6269 if (!timingsEnabled()) {

6270 return;

6271 }

6272 getState().commandMs = durationMs;

6273}

6274// ../common/src/telemetry/proxy-http-agent.ts

6275var slot = singleton("ProxyAuthHttpsAgent");

6276

6277// ../common/src/telemetry/node-appinsights-telemetry-provider.ts

6278var providerSlot = singleton("TelemetryProvider");

6279

6280// ../common/src/telemetry/telemetry-spool.ts

6281var sidecarEntrySlot = singleton("TelemetrySidecarEntry");

6282var MAX_SPOOL_AGE_MS = 72 * 60 * 60 * 1000;

6283

6284// ../common/src/telemetry/telemetry-init.ts

6285var telemetryInstanceSlot = singleton("TelemetryService");

6286var DEFAULT_AI_CONNECTION_STRING = atob("SW5zdHJ1bWVudGF0aW9uS2V5PTliZDM3NDgyLTgxMGUtNDQyYS1hYWE2LWQzOGVmNjVjNjY3NDtJbmdlc3Rpb25FbmRwb2ludD1odHRwczovL3dlc3RldXJvcGUtNS5pbi5hcHBsaWNhdGlvbmluc2lnaHRzLmF6dXJlLmNvbS87TGl2ZUVuZHBvaW50PWh0dHBzOi8vd2VzdGV1cm9wZS5saXZlZGlhZ25vc3RpY3MubW9uaXRvci5henVyZS5jb20vO0FwcGxpY2F0aW9uSWQ9MzU2OTdlZjEtOGJkMC00ZjE5LWEyN2MtZDg3Y2NhYzY2ZDJj");

6287function getGlobalTelemetryInstance() {

High

Base64 Obscured Url

Source decodes a Base64-obscured HTTP endpoint at runtime.

dist/tool-1k6khwzd.jsView on unpkg · L6285

6288 const existing = telemetryInstanceSlot.get();

6289 if (existing && typeof existing === "object" && "trackEvent" in existing && typeof existing.trackEvent === "function") {

6290 return existing;

6291 }

6292 return;

6293}

6294function setGlobalTelemetryInstance(instance) {

6295 telemetryInstanceSlot.set(instance);

6296}

6297var _localTelemetryInstance;

6298function getTelemetryInstance() {

6299 const global = getGlobalTelemetryInstance();

6300 if (global)

6301 return global;

6302 if (!_localTelemetryInstance) {

6303 _localTelemetryInstance = new TelemetryService(new LoggerTelemetryProvider, new NodeContextStorage);

6304 setGlobalTelemetryInstance(_localTelemetryInstance);

6305 }

Lines 9430-9468javascript

9430 Data: {

9431 Path: targetPath,

9432 Errors: errors

9433 }

9434 });

9435 processContext.exit(1);

9436 return;

9437 }

dist/index-sby22td6.jsView file

•stage = ast_semantic_analysis; reason = ast_alias_growth_limit_exceeded; limitedFiles = 1

High

Semantic Analysis Limited

A bounded semantic-analysis stage reached its safety limit; remaining detectors completed, but this package requires AI review.

dist/index-sby22td6.jsView on unpkg

•matchType = previous_version_dangerous_delta matchedPackage = @uipath/rpa-legacy-tool@1.201.0 matchedIdentity = npm:QHVpcGF0aC9ycGEtbGVnYWN5LXRvb2w:1.201.0 similarity = 0.500 summary = stored previous version shares package body but lacks this dangerous source file

High

Previous Version Dangerous Delta

This package version adds a dangerous source file absent from the previous stored version; route for source-aware review.

dist/index-sby22td6.jsView on unpkg

package.jsonView file

Lines 1-34json

2 "name": "@uipath/rpa-legacy-tool",

3 "license": "SEE LICENSE IN LICENSE.txt",

4 "version": "1.202.1",

5 "description": "uipcli plugin for validating, analyzing and building RPA projects using the legacy UiPath CLI",

dist/index.jsView file

Lines 1-17javascript

1#!/usr/bin/env bun

2import {

3 Command,

4 metadata,

5 registerCommands

6} from "./tool-1k6khwzd.js";

7import"./tool-g0hcxnae.js";

8import"./tool-1de529jm.js";

Source & flagged code

6 flagged · loading source

dist/tool-1k6khwzd.jsView file

6285var telemetryInstanceSlot = singleton("TelemetryService"); L6286: var DEFAULT_AI_CONNECTION_STRING = atob("[redacted]... L6287: function getGlobalTelemetryInstance() {

High

Base64 Obscured Url

Source decodes a Base64-obscured HTTP endpoint at runtime.

dist/tool-1k6khwzd.jsView on unpkg · L6285

9450var metadata = { name: "rpa-legacy-tool", version: package_default.version, description: "Validate, build and debug UiPath RPA workflows. Discover activities and inspect type definitions from project dependencies.", commandPrefix: "rpa-legacy" }; var registerCommands = async (program2) => { registerFindActivitiesCommand(program2); registerTypeDefinitionCommand(progr

Low

Ai Review Evidence

The main bundle registers RPA validation, build, debug, package-search, and type-inspection commands.

dist/tool-1k6khwzd.jsView on unpkg · L9450

dist/index-sby22td6.jsView file

•stage = ast_semantic_analysis; reason = ast_alias_growth_limit_exceeded; limitedFiles = 1

Findings

3 High2 Medium7 Low

HighBase64 Obscured Urldist/tool-1k6khwzd.js

HighSemantic Analysis Limiteddist/index-sby22td6.js

HighPrevious Version Dangerous Deltadist/index-sby22td6.js

MediumNetwork

MediumEnvironment Vars

LowFilesystem

LowHigh Entropy Strings

LowUrl Strings

LowNo License

LowSuspicious Lifecycle Evidencepackage.json

LowAi Review Evidencedist/index.js

LowAi Review Evidencedist/tool-1k6khwzd.js

Affected versions and remediation

This report applies to @uipath/rpa-legacy-tool@1.202.1.

See all versions of @uipath/rpa-legacy-tool for other recorded verdicts.

Review the evidence and your use of @uipath/rpa-legacy-tool@1.202.1 before allowing it. Restrict the permissions described in this report.
Choose an independently verified alternative or release. This report does not establish that other versions are safe.

Evidence last updated: 2026-09-26 03:47:27.911Z (UTC).

Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.

AI Security Review

Decision evidence

Source & flagged code

Source & flagged code

Findings

Affected versions and remediation

Related packages

More from @uipath

Behavioral surface

Related packages

More from @uipath

Source & flagged code