registry / @uipath/vertical-solutions-tool / 1.203.0
@uipath/vertical-solutions-tool@1.203.0
Scaffold and generate Vertical Solution projects.
AI Security Review
scanned 12d ago · by lpm-firewall-aiThe inspected source supports ordinary UiPath authentication and JWT parsing; the flagged CLI bundle excerpt is browser-opening dependency code. No malicious behavior was established, so mark clean.
Static reason
One or more suspicious static signals were detected.
Trigger
The CLI or tool module is used; the inspected browser-opening functions are exported for invocation.
Impact
No malicious behavior or confirmed attack surface was established from the inspected excerpts.
Mechanism
The inspected code sets a UiPath cloud default, decodes JWT payloads, and exports browser-opening helpers.
AI rationale
The inspected source supports ordinary UiPath authentication and JWT parsing; the flagged CLI bundle excerpt is browser-opening dependency code. No malicious behavior was established, so mark clean.
Network endpoints1
cloud.uipath.com
Decision evidence
public snapshotAI called this Clean at 78.0% confidence as Benign with low false-positive risk.
Evidence for AI clean decision
- package.json exposes a tool module and a CLI entrypoint, with no lifecycle scripts declared.
- The flagged Base64 decoding parses a JWT payload; it does not reveal a hidden network endpoint.
- The authentication bundle uses UiPath's cloud service as its default authority.
- The flagged index bundle contains browser-opening dependency code; the inspected excerpt exports browser-opening functions.
Evidence against
Behavioral surface
ChildProcessCryptoEnvironmentVarsEvalFilesystemNetwork
HighEntropyStringsUrlStrings
NoLicense
Source & flagged code
5 flagged · loading sourcedist/tool-63w5y36r.jsView file
8787var telemetryInstanceSlot = singleton("TelemetryService");
L8788: var DEFAULT_AI_CONNECTION_STRING = atob("[redacted]...
L8789: function getGlobalTelemetryInstance() {
High
Base64 Obscured Url
Source decodes a Base64-obscured HTTP endpoint at runtime.
dist/tool-63w5y36r.jsView on unpkg · L878731137IR = ".uipath";
var AUTH_FILENAME = ".auth";
var DEFAULT_BASE_URL = "https://cloud.uipath.com";
var DEFAULT_AUTH_TIMEOUT_MS2 = 5 * 60 * 1000;
// ../auth/src/config.ts
var DEFAULT_
Medium
Stripped Provenance Metadata
The authentication bundle uses UiPath's cloud service as its default authority.
dist/tool-63w5y36r.jsView on unpkg · L3113731336l.replace(/-/g, "+").replace(/_/g, "/");
let decodedString;
if (isBrowser() && typeof atob !== "undefined") {
decodedString = atob(base643);
} else {
decode
Low
Ai Review Evidence
The flagged Base64 decoding parses a JWT payload; it does not reveal a hidden network endpoint.
dist/tool-63w5y36r.jsView on unpkg · L31336Findings
2 High3 Medium7 Low
HighBase64 Obscured Urldist/tool-63w5y36r.js
HighSemantic Analysis Limiteddist/index-h8cph72k.js
MediumNetwork
MediumEnvironment Vars
MediumStripped Provenance Metadatadist/tool-63w5y36r.js
LowEval
LowFilesystem
LowHigh Entropy Strings
LowUrl Strings
LowNo License
LowSuspicious Lifecycle Evidencepackage.json
LowAi Review Evidencedist/tool-63w5y36r.js
Affected versions and remediation
This report applies to @uipath/vertical-solutions-tool@1.203.0.
See all versions of @uipath/vertical-solutions-tool for other recorded verdicts.
- Review the evidence and your use of @uipath/vertical-solutions-tool@1.203.0 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.