registry / @uipath/uipath-python-bridge / 1.200.0

@uipath/uipath-python-bridge@1.200.0

Shared Python detection, caching, and CLI bridge for UiPath Python SDK tools.

AI Security Review

scanned 28d ago · by lpm-firewall-ai

The published surface is a library with no lifecycle hooks, and its process and token use is the documented UiPath Python bridge invoked by the caller. Identity traffic is constrained to an HTTPS authority supplied by config, environment, or the default UiPath cloud host.

Static reason

One or more suspicious static signals were detected.

Trigger

A consuming application must import the module and call an exported helper such as runUipathPythonCommand.

Impact

No unconsented credential theft, remote payload, persistence, or agent-control mutation is established by the inspected source.

Mechanism

Helpers detect a local Python install, cache paths, and spawn the UiPath Python CLI; token refresh posts only to the configured HTTPS identity authority.

AI rationale

Decision evidence

public snapshot

AI called this Clean at 86.0% confidence as Benign with low false-positive risk.

Evidence for AI clean decision

package.json declares an ESM library with main and exports pointing at dist/index.js and defines no install lifecycle scripts or bin entry.
The module exports Python setup, cache, and command helpers that run only when a caller imports and invokes them.
UiPath OIDC authority URLs are rejected unless they use https before token exchange.
Python process use locates the installed uipath distribution as part of the stated CLI bridge.

Evidence against

child_process.spawn and a refresh-token POST exist, but they are caller-invoked UiPath CLI and identity flows, not install-time behavior.
No agent config writes, obfuscated payloads, or self-install dependency chain appear in the package.

Behavioral surface

Source

ChildProcessCryptoEnvironmentVarsFilesystemNetwork

Supply chain

HighEntropyStringsUrlStrings

ManifestNo manifest risk signals triggered.

Source & flagged code

5 flagged

dist/index.jsView file

Lines 9270-9310javascript

9270 let hex = "";

9271 do {

9272 crypto.getRandomValues(bytes);

9273 hex = "";

9274 for (const byte of bytes) {

9275 hex += byte.toString(16).padStart(2, "0");

9276 }

9277 } while (/^0+$/.test(hex));

9278 return hex;

9279 }

9280}

9281// ../common/src/telemetry/node-appinsights-telemetry-provider.ts

9282var providerSlot = singleton("TelemetryProvider");

9283

9284// ../common/src/telemetry/telemetry-spool.ts

9285init_src();

9286var sidecarEntrySlot = singleton("TelemetrySidecarEntry");

9287var MAX_SPOOL_AGE_MS = 72 * 60 * 60 * 1000;

9288

9289// ../common/src/telemetry/telemetry-init.ts

9290var telemetryInstanceSlot = singleton("TelemetryService");

9291var DEFAULT_AI_CONNECTION_STRING = atob("SW5zdHJ1bWVudGF0aW9uS2V5PTliZDM3NDgyLTgxMGUtNDQyYS1hYWE2LWQzOGVmNjVjNjY3NDtJbmdlc3Rpb25FbmRwb2ludD1odHRwczovL3dlc3RldXJvcGUtNS5pbi5hcHBsaWNhdGlvbmluc2lnaHRzLmF6dXJlLmNvbS87TGl2ZUVuZHBvaW50PWh0dHBzOi8vd2VzdGV1cm9wZS5saXZlZGlhZ25vc3RpY3MubW9uaXRvci5henVyZS5jb20vO0FwcGxpY2F0aW9uSWQ9MzU2OTdlZjEtOGJkMC00ZjE5LWEyN2MtZDg3Y2NhYzY2ZDJj");

9292function getGlobalTelemetryInstance() {

High

Base64 Obscured Url

Source decodes a Base64-obscured HTTP endpoint at runtime.

dist/index.jsView on unpkg · L9290

9293 const existing = telemetryInstanceSlot.get();

9294 if (existing && typeof existing === "object" && "trackEvent" in existing && typeof existing.trackEvent === "function") {

9295 return existing;

9296 }

9297 return;

9298}

9299var _localTelemetryInstance;

9300function getTelemetryInstance() {

9301 const global = getGlobalTelemetryInstance();

9302 if (global)

9303 return global;

9304 if (!_localTelemetryInstance) {

9305 _localTelemetryInstance = new TelemetryService(new LoggerTelemetryProvider, new NodeContextStorage);

9306 }

9307 return _localTelemetryInstance;

9308}

9309var telemetry = new Proxy({}, {

9310 get(_, prop) {

Lines 10364-10404javascript

10364 this.reason = reason;

10365 this.name = "InvalidBaseUrlError";

10366 }

10367}

10368var DEFAULT_SCOPES = ["openid", "profile", "offline_access"];

Lines 11950-11990javascript

11950 logger.info(`Found uipath executable at: ${candidate}`);

11951 return candidate;

11952 }

11953 }

11954 const pathCandidates = this.getPathUipathCandidates(fs7, isWindows);

11955

Lines 12227-12263javascript

12227function normalizeDefaultActionArgs(args) {

12228 return args.length === 1 && args[0] === "-h" ? ["--help"] : args;

12229

package.jsonView file

Lines 1-21json

2 "name": "@uipath/uipath-python-bridge",

3 "license": "MIT",

4 "version": "1.200.0",

5 "description": "Shared Python detection, caching, and CLI bridge for UiPath Python SDK tools.",

Source & flagged code

5 flagged · loading source

dist/index.jsView file

9290var telemetryInstanceSlot = singleton("TelemetryService"); L9291: var DEFAULT_AI_CONNECTION_STRING = atob("[redacted]... L9292: function getGlobalTelemetryInstance() {

High

Base64 Obscured Url

Source decodes a Base64-obscured HTTP endpoint at runtime.

dist/index.jsView on unpkg · L9290

10384if (url.protocol !== "https:") { throw new InvalidBaseUrlError(baseUrl, `Authority must use https:// scheme, got ${url.protocol}//. OIDC token exchange re

Medium

Stripped Provenance Metadata

UiPath OIDC authority URLs are rejected unless they use https before token exchange.

dist/index.jsView on unpkg · L10384

12247export { runUipathPythonCommand, readCache, processCommandArgs, getPackageName, getCacheFileName, getAllowedPythonVersions, createSetupCommand,

Low

Ai Review Evidence

The module exports Python setup, cache, and command helpers that run only when a caller imports and invokes them.

dist/index.jsView on unpkg · L12247

Findings

1 High3 Medium6 Low

HighBase64 Obscured Urldist/index.js

MediumNetwork

MediumEnvironment Vars

MediumStripped Provenance Metadatadist/index.js

LowFilesystem

LowHigh Entropy Strings

LowUrl Strings

LowSuspicious Lifecycle Evidencepackage.json

LowAi Review Evidencedist/index.js

Affected versions and remediation

This report applies to @uipath/uipath-python-bridge@1.200.0.

See all versions of @uipath/uipath-python-bridge for other recorded verdicts.

Review the evidence and your use of @uipath/uipath-python-bridge@1.200.0 before allowing it. Restrict the permissions described in this report.
Choose an independently verified alternative or release. This report does not establish that other versions are safe.

Evidence last updated: 2026-09-26 03:54:59.865Z (UTC).

Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.

AI Security Review

Decision evidence

Source & flagged code

Source & flagged code

Findings

Affected versions and remediation

Related packages

More from @uipath

Behavioral surface

Related packages

More from @uipath

Source & flagged code