registry / @uipath/test-manager-tool / 1.196.0

@uipath/test-manager-tool@1.196.0

Manage test cases, test sets, executions, and results.

AI Security Review

scanned 19d ago · by lpm-firewall-ai

No confirmed malicious attack surface was established. The package is a UiPath Test Manager CLI with user-invoked API calls, telemetry, auth-file handling, and report/download file writes.

Static reason

One or more suspicious static signals were detected.

Trigger

User runs the test-manager-tool CLI or imports/registers its commands.

Impact

Expected API access to UiPath services and local reads/writes for auth files, input files, downloads, and reports.

Mechanism

User-invoked UiPath management CLI operations

Rationale

Static source inspection shows suspicious primitives are bundled dependencies or expected CLI capabilities for UiPath authentication, browser/robot integration, telemetry, and Test Manager API operations. There is no lifecycle hook or unconsented import-time/install-time behavior indicating malware.

Evidence

package.jsondist/index.jsdist/tool.js.uipath/.authuser-specified report/download/input paths/proc/self/cgroup/proc/version/etc/wsl.conf

Network endpoints4

cloud.uipath.comwesteurope-5.in.applicationinsights.azure.comwesteurope.livediagnostics.monitor.azure.comalpha.uipath.com/uipattycyrhx/abizon_1/orchestrator_

@uipath/test-manager-tool@1.196.0

AI Security Review

Decision evidence

Source & flagged code

Source & flagged code

Findings

Source & flagged code