registry / @uipath/rpa-legacy-tool / 1.203.0

@uipath/rpa-legacy-tool@1.203.0

uipcli plugin for validating, analyzing and building RPA projects using the legacy UiPath CLI

AI Security Review

scanned 12d ago · by lpm-firewall-ai

Source inspection supports ordinary UiPath CLI, telemetry, and authentication behavior; the encoded string and static capability signals do not establish an attack. No lifecycle hook was present in the inspected package metadata.

Static reason

One or more suspicious static signals were detected.; previous stored version diff introduced dangerous source

Trigger

Use of the exposed CLI or tool entrypoint.

Impact

No concrete unauthorized data access, exfiltration, or system modification was established.

Mechanism

The inspected code initializes telemetry, retrieves the legacy CLI from a UiPath package feed, and exchanges an authorization code with a configured HTTPS authority.

AI rationale

Decision evidence

public snapshot

AI called this Clean at 89.0% confidence as Benign with low false-positive risk.

Evidence for AI clean decision

package.json exposes the tool bundle and a CLI entrypoint, with no lifecycle hook shown.
The encoded telemetry string is part of telemetry initialization; no evidence inspected tied it to secret harvesting.
The flagged secondary bundle imports browser-opening and platform-detection dependencies.
The authentication bundle requires HTTPS authorities and sends authorization-code data to the configured token endpoint.

Evidence against

Behavioral surface

Source

ChildProcessCryptoEnvironmentVarsFilesystemNetwork

Supply chain

HighEntropyStringsUrlStrings

Manifest

NoLicense

scanned 14 file(s), 550 KB of source, external domains: cloud.uipath.com, fonts.googleapis.com, fonts.gstatic.com, github.com, govcloud.uipath.us, npm.pkg.github.com, pkgs.dev.azure.com, www.w3.org

Source & flagged code

6 flagged

dist/tool-0avq7vas.jsView file

Lines 3783-3824javascript

3783 }

3784 getState().commandStart = performance.now();

3785}

3786function recordCommandDuration(durationMs) {

3787 if (!timingsEnabled()) {

3788 return;

3789 }

3790 getState().commandMs = durationMs;

3791}

3792// ../common/src/telemetry/proxy-http-agent.ts

3793var slot = singleton("ProxyAuthHttpsAgent");

3794

3795// ../common/src/telemetry/node-appinsights-telemetry-provider.ts

3796var providerSlot = singleton("TelemetryProvider");

3797

3798// ../common/src/telemetry/telemetry-spool.ts

3799var sidecarEntrySlot = singleton("TelemetrySidecarEntry");

3800var MAX_SPOOL_AGE_MS = 72 * 60 * 60 * 1000;

3801

3802// ../common/src/telemetry/telemetry-init.ts

3803var telemetryInstanceSlot = singleton("TelemetryService");

3804var DEFAULT_AI_CONNECTION_STRING = atob("SW5zdHJ1bWVudGF0aW9uS2V5PTliZDM3NDgyLTgxMGUtNDQyYS1hYWE2LWQzOGVmNjVjNjY3NDtJbmdlc3Rpb25FbmRwb2ludD1odHRwczovL3dlc3RldXJvcGUtNS5pbi5hcHBsaWNhdGlvbmluc2lnaHRzLmF6dXJlLmNvbS87TGl2ZUVuZHBvaW50PWh0dHBzOi8vd2VzdGV1cm9wZS5saXZlZGlhZ25vc3RpY3MubW9uaXRvci5henVyZS5jb20vO0FwcGxpY2F0aW9uSWQ9MzU2OTdlZjEtOGJkMC00ZjE5LWEyN2MtZDg3Y2NhYzY2ZDJj");

Low

Ai Review Evidence

The encoded telemetry string is part of telemetry initialization; no evidence inspected tied it to secret harvesting.

dist/tool-0avq7vas.jsView on unpkg · L3804

3805function getGlobalTelemetryInstance() {

High

Base64 Obscured Url

Source decodes a Base64-obscured HTTP endpoint at runtime.

dist/tool-0avq7vas.jsView on unpkg · L3803

3806 const existing = telemetryInstanceSlot.get();

3807 if (existing && typeof existing === "object" && "trackEvent" in existing && typeof existing.trackEvent === "function") {

3808 return existing;

3809 }

3810 return;

3811}

3812function setGlobalTelemetryInstance(instance) {

3813 telemetryInstanceSlot.set(instance);

3814}

3815var _localTelemetryInstance;

3816function getTelemetryInstance() {

3817 const global = getGlobalTelemetryInstance();

3818 if (global)

3819 return global;

3820 if (!_localTelemetryInstance) {

3821 _localTelemetryInstance = new TelemetryService(new LoggerTelemetryProvider, new NodeContextStorage);

3822 setGlobalTelemetryInstance(_localTelemetryInstance);

3823 }

3824 return _localTelemetryInstance;

dist/index-sby22td6.jsView file

Lines 1-21javascript

1import"./tool-1de529jm.js";

3// ../../node_modules/open/index.js

4import process7 from "node:process";

5import path from "node:path";

6import { fileURLToPath } from

dist/index-b3kekctx.jsView file

•matchType = previous_version_dangerous_delta matchedPackage = @uipath/rpa-legacy-tool@1.202.1 matchedIdentity = npm:QHVpcGF0aC9ycGEtbGVnYWN5LXRvb2w:1.202.1 similarity = 0.929 summary = stored previous version shares package body but lacks this dangerous source file

High

Previous Version Dangerous Delta

This package version adds a dangerous source file absent from the previous stored version; route for source-aware review.

dist/index-b3kekctx.jsView on unpkg

package.jsonView file

Lines 2-35json

2 "name": "@uipath/rpa-legacy-tool",

3 "author": "UiPath",

4 "license": "SEE LICENSE IN LICENSE.txt",

5 "version": "1.203.0",

6 "description":

Source & flagged code

6 flagged · loading source

dist/tool-0avq7vas.jsView file

3803var telemetryInstanceSlot = singleton("TelemetryService"); L3804: var DEFAULT_AI_CONNECTION_STRING = atob("[redacted]... L3805: function getGlobalTelemetryInstance() {

High

Base64 Obscured Url

Source decodes a Base64-obscured HTTP endpoint at runtime.

dist/tool-0avq7vas.jsView on unpkg · L3803

3804AI_CONNECTION_STRING = atob("[redacted]

Low

Ai Review Evidence

The encoded telemetry string is part of telemetry initialization; no evidence inspected tied it to secret harvesting.

dist/tool-0avq7vas.jsView on unpkg · L3804

dist/index-sby22td6.jsView file

•stage = ast_semantic_analysis; reason = ast_alias_growth_limit_exceeded; limitedFiles = 1

High

Semantic Analysis Limited

A bounded semantic-analysis stage reached its safety limit; remaining detectors completed, but this package requires AI review.

Findings

3 High2 Medium7 Low

HighBase64 Obscured Urldist/tool-0avq7vas.js

HighSemantic Analysis Limiteddist/index-sby22td6.js

HighPrevious Version Dangerous Deltadist/index-b3kekctx.js

MediumNetwork

MediumEnvironment Vars

LowFilesystem

LowHigh Entropy Strings

LowUrl Strings

LowNo License

LowSuspicious Lifecycle Evidencepackage.json

LowAi Review Evidencedist/tool-0avq7vas.js

LowSuspicious Dependency Evidencedist/index-sby22td6.js

Affected versions and remediation

This report applies to @uipath/rpa-legacy-tool@1.203.0.

See all versions of @uipath/rpa-legacy-tool for other recorded verdicts.

Review the evidence and your use of @uipath/rpa-legacy-tool@1.203.0 before allowing it. Restrict the permissions described in this report.
Choose an independently verified alternative or release. This report does not establish that other versions are safe.

Evidence last updated: 2026-10-11 18:01:04.954Z (UTC).

Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.

AI Security Review

Decision evidence

Source & flagged code

Source & flagged code

Findings

Affected versions and remediation

Related packages

More from @uipath

Behavioral surface

Related packages

More from @uipath

Source & flagged code