registry / @uipath/solution-tool / 1.203.0
@uipath/solution-tool@1.203.0
Create, pack, publish, and deploy UiPath Automation Solutions.
AI Security Review
scanned 12d ago · by lpm-firewall-aiThe inspected findings are consistent with solution setup and user-invoked export behavior, and the credential is sent to the active Studio Web authentication base URL. The scanner hints did not establish an attack.
Static reason
One or more suspicious static signals were detected.; previous stored version diff introduced dangerous source
Trigger
A user invokes the solution download command.
Impact
No confirmed attack surface was established in the inspected behavior.
Mechanism
The command constructs an export URL using the active authentication base URL and sends the access token to that URL.
AI rationale
The inspected findings are consistent with solution setup and user-invoked export behavior, and the credential is sent to the active Studio Web authentication base URL. The scanner hints did not establish an attack.
Evidence
AGENTS.mdCLAUDE.md
Decision evidence
public snapshotAI called this Clean at 79.0% confidence as Benign with low false-positive risk.
Evidence for AI clean decision
- The manifest exposes a command-line entry point and module exports, with no lifecycle scripts in the inspected manifest.
- The flagged briefing code reads a packaged template and prepares AGENTS.md and CLAUDE.md files for solution setup.
- The flagged initialization module derives a project directory and handles solution initialization.
- The large packager bundle starts with imports for solution preparation and packager tools; no suspicious decoded endpoint was found in the inspected opening excerpt.
- The flagged index bundle imports the standard open utility and platform helpers.
- The inspected credential-bearing request builds a solution export URL from the active Studio Web authentication base URL and sends the token to that URL.
Evidence against
Behavioral surface
ChildProcessCryptoDynamicRequireEnvironmentVarsEvalFilesystemNetworkShell
Source & flagged code
5 flagged · loading sourcedist/packager-tool-34thmeqx.jsView file
•Manifest-reachable source captures an API credential, sends it to a fixed unofficial gateway, and persists that redirection in agent or shell configuration.
dist/packager-tool-34thmeqx.js:
async function deleteSolutionOnStudioWeb(baseUrl, organizationName, tenantId, accessToken, solutionId) {
const url = `${baseUrl}/${organizationName}/studio_/backend/api/Solution/${encodeURIComponent(solutionId)}`;
Authorization: `Bearer ${accessToken}`,
if (loginStatus.loginStatus !== "Logged in" || !loginStatus.accessToken || !loginStatus.baseUrl || !loginStatus.organizationName || !loginStatus.tenantId) {
const [deleteError] = await catchError(deleteSolutionOnStudioWeb(loginStatus.baseUrl, loginStatus.organizationName, loginStatus.tenantId, loginStatus.accessToken, solutionId));
const [writeError] = aw
High
Credential Redirect Persistence
Manifest-reachable source sends a prompted API credential to a fixed unofficial gateway and persists the redirection.
dist/packager-tool-34thmeqx.jsView on unpkg5095] = await Promise.all([
L5096: import("./packager-tool-resolver-jzjgh1vx.js"),
L5097: import("./prepare-solution-resources-0ms8dtg3.js"),
Medium
Dynamic Require
Package source references dynamic require/import behavior.
dist/packager-tool-34thmeqx.jsView on unpkg · L5095Findings
4 High4 Medium5 Low
HighCredential Redirect Persistencedist/packager-tool-34thmeqx.js
HighBase64 Obscured Urldist/packager-tool-h93qasg7.js
HighSemantic Analysis Limiteddist/index-sby22td6.js
HighPrevious Version Dangerous Deltadist/packager-tool-h93qasg7.js
MediumDynamic Requiredist/packager-tool-34thmeqx.js
MediumNetwork
MediumEnvironment Vars
MediumStructural Risk Force Deep Review
LowEval
LowFilesystem
LowHigh Entropy Strings
LowUrl Strings
LowNo License
Affected versions and remediation
This report applies to @uipath/solution-tool@1.203.0.
See all versions of @uipath/solution-tool for other recorded verdicts.
- Review the evidence and your use of @uipath/solution-tool@1.203.0 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.