registry / @uipath/uipath-python-bridge / 1.201.0
@uipath/uipath-python-bridge@1.201.0
Shared Python detection, caching, and CLI bridge for UiPath Python SDK tools.
AI Security Review
scanned 2mo ago · by lpm-firewall-aiThe static signals are consistent with a Python CLI bridge: JWT parsing, OAuth refresh, cached executable discovery, and explicit command execution. With no lifecycle hook, import-time activation, or concrete exfiltration or persistence behavior, the package is clean.
Static reason
One or more suspicious static signals were detected.
Trigger
A consuming application explicitly calls an exported setup, command, or authentication function.
Impact
Expected SDK bridge behavior; no automatic install-time action was found.
Mechanism
Runs a configured local UiPath Python executable and performs OAuth token refreshes.
AI rationale
The static signals are consistent with a Python CLI bridge: JWT parsing, OAuth refresh, cached executable discovery, and explicit command execution. With no lifecycle hook, import-time activation, or concrete exfiltration or persistence behavior, the package is clean.
Decision evidence
public snapshotAI called this Clean at 94.0% confidence as Benign with low false-positive risk.
Evidence for AI clean decision
- The manifest exposes only the dist module and contains no lifecycle scripts.
- The module can spawn a cached local UiPath Python executable when its exported command function is called.
- It refreshes OAuth tokens through a supplied token endpoint.
- It writes only a UiPath Python cache during explicit setup.
Evidence against
- No install-time hook or self-dependency is present.
- The flagged Base64 operation decodes the payload portion of a JWT, not an obscured URL.
- Importing the module exports functions and classes; no setup or command is invoked at import time.
- No credential harvesting, arbitrary remote payload loading, destructive action, or persistence was found.
Behavioral surface
ChildProcessCryptoEnvironmentVarsFilesystemNetworkShell
HighEntropyStringsUrlStrings
Source & flagged code
6 flagged · loading sourcedist/index.jsView file
9377var telemetryInstanceSlot = singleton("TelemetryService");
L9378: var DEFAULT_AI_CONNECTION_STRING = atob("[redacted]...
L9379: function getGlobalTelemetryInstance() {
High
Base64 Obscured Url
Source decodes a Base64-obscured HTTP endpoint at runtime.
dist/index.jsView on unpkg · L937711797async function runUipathPythonCommand(args, options = {}) {
const fs7 = getFileSystem();
const cacheFile = fs7.path.join(fs7.env.homedir(), UIPATH_HOME_DIR, getCacheFileName());
const setupHint = `Run 'uip ${options.commandPrefix ?? "codedagent"} setup' first to configure the environment. ` + "If you are using a virtual environment, activate it first.";
const cache = await readCache(cacheFile);
if (!cache?.uipathExePath) {
return fail("python_not_configured", "Python not configured.", setupHint);
}
if (!await fs7.exists(cache.uipathExePath)) {
return fail("uipath_exe_mi
Low
Ai Review Evidence
The module can spawn a cached local UiPath Python executable when its exported command function is called.
dist/index.jsView on unpkg · L1179711844const stdio = options.stdio ?? "inherit";
const cwd = options.cwd ?? fs7.env.cwd();
const proc = spawn(cache.uipathExePath, commandArgs, {
cwd,
env: {
...process.env,
...authEnv,
...requiredEnv
},
stdio: stdio === "pipe" ? ["ignore", "pipe", "pipe"] : "inherit",
signal: options.signal
});
Findings
1 High2 Medium8 Low
HighBase64 Obscured Urldist/index.js
MediumNetwork
MediumEnvironment Vars
LowFilesystem
LowHigh Entropy Strings
LowUrl Strings
LowSuspicious Lifecycle Evidencepackage.json
LowAi Review Evidencedist/index.js
LowAi Review Evidencedist/index.js
LowAi Review Evidencedist/index.js
LowAi Review Evidencedist/index.js
Affected versions and remediation
This report applies to @uipath/uipath-python-bridge@1.201.0.
See all versions of @uipath/uipath-python-bridge for other recorded verdicts.
- Review the evidence and your use of @uipath/uipath-python-bridge@1.201.0 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.