registry / @uipath/uipath-python-bridge / 1.199.0

@uipath/uipath-python-bridge@1.199.0

Shared Python detection, caching, and CLI bridge for UiPath Python SDK tools.

AI Security Review

scanned 25d ago · by lpm-firewall-ai

No confirmed malicious attack surface. The flagged Base64 value is inactive telemetry configuration, while credential and process operations support explicit UiPath CLI/auth workflows.

Static reason

One or more suspicious static signals were detected.

Trigger

Explicit caller invocation of setup, Python command forwarding, or authentication status/refresh.

Impact

No unconsented install-time execution, foreign-package overwrite, exfiltration, or persistence found.

Mechanism

UiPath Python discovery, credential refresh, and command bridge

Rationale

Direct inspection found a bundled UiPath bridge with no lifecycle hooks or import-time side effects. Scanner signals map to legitimate CLI/auth functionality and an unused remote telemetry connection string rather than a concrete attack chain.

Evidence

package.jsondist/index.js

Decision evidence

public snapshot

AI called this Clean at 96.0% confidence as Benign with low false-positive risk.

Evidence for block

Evidence against

package.json has no lifecycle scripts or bin entrypoint.
dist/index.js exports library helpers; import does not invoke setup, spawning, or network calls.

@uipath/uipath-python-bridge@1.199.0

AI Security Review

Decision evidence

Source & flagged code

Source & flagged code

Findings

Source & flagged code