registry / @uipath/test-manager-tool / 1.202.1
@uipath/test-manager-tool@1.202.1
Manage test cases, test sets, executions, and results.
AI Security Review
scanned 28d ago · by lpm-firewall-aiStatic inspection found normal CLI entry points and service authentication, with no lifecycle hook or concrete malicious behavior. The observed subprocess helper is a launcher implementation rather than an install-time action.
Static reason
One or more suspicious static signals were detected.
Trigger
Explicit import or invocation of the CLI.
Impact
No unconsented installation-time mutation, persistence, exfiltration, or destructive behavior was established.
Mechanism
The reviewed code registers CLI commands and performs ordinary HTTPS OAuth token refresh for its configured service.
AI rationale
Static inspection found normal CLI entry points and service authentication, with no lifecycle hook or concrete malicious behavior. The observed subprocess helper is a launcher implementation rather than an install-time action.
Decision evidence
public snapshotAI called this Clean at 96.0% confidence as Benign with low false-positive risk.
Evidence for AI clean decision
- Package metadata defines library and CLI entry points and contains no lifecycle scripts.
- The authentication code requires HTTPS for its configured authority and uses a UiPath cloud default.
- Token refresh sends the refresh token to the configured token endpoint as part of OAuth authentication.
- The required launcher bundle contains a normal subprocess call for opening a target.
Evidence against
Behavioral surface
ChildProcessCryptoEnvironmentVarsEvalFilesystemNetwork
HighEntropyStringsUrlStrings
NoLicense
Source & flagged code
6 flagged · loading sourcedist/tool-e10p1581.jsView file
13468var telemetryInstanceSlot = singleton("TelemetryService");
L13469: var DEFAULT_AI_CONNECTION_STRING = atob("[redacted]...
L13470: function getGlobalTelemetryInstance() {
High
Base64 Obscured Url
Source decodes a Base64-obscured HTTP endpoint at runtime.
dist/tool-e10p1581.jsView on unpkg · L1346823714new InvalidBaseUrlError(baseUrl, `Malformed URL.${shapeHint}`);
}
if (url.protocol !== "https:") {
throw new InvalidBaseUrlError(baseUrl, `Authority must use https:// scheme, got ${url.protoco
Medium
Stripped Provenance Metadata
The authentication code requires HTTPS for its configured authority and uses a UiPath cloud default.
dist/tool-e10p1581.jsView on unpkg · L237144626if (typeof callback !== "function") {
L4627: callback = new Function("" + callback);
L4628: }
Low
Eval
Package source references a known benign dynamic code generation pattern.
dist/tool-e10p1581.jsView on unpkg · L4626Findings
2 High3 Medium7 Low
HighBase64 Obscured Urldist/tool-e10p1581.js
HighSemantic Analysis Limiteddist/index-sby22td6.js
MediumNetwork
MediumEnvironment Vars
MediumStripped Provenance Metadatadist/tool-e10p1581.js
LowEvaldist/tool-e10p1581.js
LowWeak Cryptodist/tool-e10p1581.js
LowFilesystem
LowHigh Entropy Strings
LowUrl Strings
LowNo License
LowSuspicious Lifecycle Evidencepackage.json
Affected versions and remediation
This report applies to @uipath/test-manager-tool@1.202.1.
See all versions of @uipath/test-manager-tool for other recorded verdicts.
- Review the evidence and your use of @uipath/test-manager-tool@1.202.1 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.