@uipath/rpa-tool: Suspicious npm security report (Warn)

Loading npm security reports…

@uipath/rpa-tool: Suspicious npm security report (Warn) | LPM Firewall

Source & flagged code

5 flagged

dist/packager-tool.jsView file

10345import { promisify as promisify7 } from "node:util"; L10346: import childProcess4 from "node:child_process"; L10347: import { promisify as promisify22 } from "node:util";

High

Child Process

Package source references child process execution.

dist/packager-tool.jsView on unpkg · L10345

11901return false; L11902: }, is_wsl_default2, init_is_wsl, execFile7, powerShellPath3 = () => `${process32.env.SYSTEMROOT || process32.env.windir || String.raw`C:\Windows`}\\System32\\WindowsPowerShell\\v1.... L11903: const {

High

Shell

Package source references shell execution.

dist/packager-tool.jsView on unpkg · L11901

89Cross-file remote execution chain: dist/packager-tool.js spawns dist/index.js; helper contains network access plus dynamic code execution. L89: return e5[t4]; L90: } }, c = Object.getPrototypeOf(Function), l = typeof process == "object" && process.env && process.env.REFLECT_METADATA_USE_MAP_POLYFILL === "true", f = l || typeof Map != "functio... L91: var e5 = {}, t4 = [], r3 = function() { ... L6031: } L6032: isWebSocket(e3) { L6033: this._address = new o.NodeWebSocketAddress(e3); ... L6135: e3.current = function() { L6136: switch (process.platform === "win32" ? t3.Windows : t3.Linux) { L6137: case t3.Windows: ... L6293: return yield new Promise((t4, r2) => { L6294: this._socketLike.write(e3, (e4) => e4 ? r2(e4) : t4()); L6295: });

High

Cross File Remote Execution Context

Source spawns a local helper that also contains network and dynamic execution context; review data flow before blocking.

dist/packager-tool.jsView on unpkg · L89

42951var telemetryInstanceSlot = singleton2("TelemetryService"); L42952: var DEFAULT_AI_CONNECTION_STRING = atob("[redacted]... L42953: function getGlobalTelemetryInstance() {

High

Base64 Obscured Url

Source decodes a Base64-obscured HTTP endpoint at runtime.

dist/packager-tool.jsView on unpkg · L42951

dist/tool.jsView file

•path = dist/tool.js kind = oversized_source_file sizeBytes = 2998951 magicHex = [redacted]

High

Oversized Source File

Package contains source files above the static scanner size ceiling.

dist/tool.jsView on unpkg

Source & flagged code

5 flagged · loading source

dist/packager-tool.jsView file

10345import { promisify as promisify7 } from "node:util"; L10346: import childProcess4 from "node:child_process"; L10347: import { promisify as promisify22 } from "node:util";

High

Child Process

Package source references child process execution.

dist/packager-tool.jsView on unpkg · L10345

High

Shell

Package source references shell execution.

dist/packager-tool.jsView on unpkg · L11901

High

Cross File Remote Execution Context

Source spawns a local helper that also contains network and dynamic execution context; review data flow before blocking.

dist/packager-tool.jsView on unpkg · L89

42951var telemetryInstanceSlot = singleton2("TelemetryService"); L42952: var DEFAULT_AI_CONNECTION_STRING = atob("[redacted]... L42953: function getGlobalTelemetryInstance() {

High

Base64 Obscured Url

Source decodes a Base64-obscured HTTP endpoint at runtime.

dist/packager-tool.jsView on unpkg · L42951

dist/tool.jsView file

•path = dist/tool.js kind = oversized_source_file sizeBytes = 2998951 magicHex = [redacted]

High

Oversized Source File

Package contains source files above the static scanner size ceiling.

dist/tool.jsView on unpkg

Source & flagged code

5 flagged

dist/packager-tool.jsView file

10345import { promisify as promisify7 } from "node:util"; L10346: import childProcess4 from "node:child_process"; L10347: import { promisify as promisify22 } from "node:util";

High

Child Process

Package source references child process execution.

dist/packager-tool.jsView on unpkg · L10345

High

Shell

Package source references shell execution.

dist/packager-tool.jsView on unpkg · L11901

High

Cross File Remote Execution Context

Source spawns a local helper that also contains network and dynamic execution context; review data flow before blocking.

dist/packager-tool.jsView on unpkg · L89

42951var telemetryInstanceSlot = singleton2("TelemetryService"); L42952: var DEFAULT_AI_CONNECTION_STRING = atob("[redacted]... L42953: function getGlobalTelemetryInstance() {

High

Base64 Obscured Url

Source decodes a Base64-obscured HTTP endpoint at runtime.

dist/packager-tool.jsView on unpkg · L42951

dist/tool.jsView file

•path = dist/tool.js kind = oversized_source_file sizeBytes = 2998951 magicHex = [redacted]

High

Oversized Source File

Package contains source files above the static scanner size ceiling.

dist/tool.jsView on unpkg

@uipath/rpa-tool@1.198.0

Static Scan Results

Decision evidence

Source & flagged code

Source & flagged code

Findings

Behavioral surface

Source & flagged code