Security News
Happy Birthday, Shai-Hulud
It has been one year since Shai-Hulud made its first appearance on npm.
By Sarah Gooding - Sep 18, 2026
New:Microsoft Teams Notifications Are Now Available in Socket.Learn more →
@uipath/codedapp-tool
Advanced tools
This package has malicious versions linked to the ongoing "Mini Shai-Hulud" supply chain attack.
Affected versions:
@uipath/codedapp-tool
Build, pack, publish, deploy, and manage UiPath Coded Web Applications.
- Version
- 1.200.0-preview.120
- Version published
- Weekly downloads
- 7.3K 81.71%
- Maintainers
- 24
Weekly downloads
- Created
The README file is missing
FAQs
Build, pack, publish, deploy, and manage UiPath Coded Web Applications.
The npm package @uipath/codedapp-tool receives a total of 5,490 weekly downloads. As such, @uipath/codedapp-tool popularity was classified as popular.
We found that @uipath/codedapp-tool demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 25 open source maintainers collaborating on the project.
Package last updated on 21 Aug 2026
Related posts
Research
/Security News
PolinRider Spreads Through Compromised GitHub Accounts and Packagist
Operators behind PolinRider used a compromised GitHub account to plant malware in four development versions of a Packagist package with 700,000+ downloads.
By Karlo Zanki - Sep 17, 2026
Security News
GitHub Actions Adds cache-mode to Limit Cache Poisoning Risk
GitHub Actions now supports cache-mode, a least-privilege control on the Actions cache aimed at the cache poisoning technique behind recent compromises.
By Sarah Gooding - Sep 16, 2026