
Security News
Re-Enabled GitHub Actions Expose Thousands of Repositories to Mini Shai-Hulud
Two compromised GitHub Actions were re-enabled with malicious tags intact, exposing thousands of downstream repositories to Mini Shai-Hulud.
@uipath/common
Advanced tools
Affected versions:
Shared infrastructure for the UiPath CLI. Provides output formatting, logging, error handling, and telemetry.
npm install @uipath/common
import { OutputFormatter } from "@uipath/common";
OutputFormatter.success({ Result: "Success", Code: "AssetList", Data: assets });
OutputFormatter.error({ Result: RESULTS.Failure, Message: "Not found", Instructions: "Check the ID" });
Supported formats: table, json, yaml, plain.
Go-style [error, data] tuple returns via catchError:
import { catchError } from "@uipath/common";
const [error, result] = await catchError(api.getData());
if (error) {
OutputFormatter.error({ Result: RESULTS.Failure, Message: error.message, Instructions: "Retry" });
return;
}
import { logger, LogLevel } from "@uipath/common";
logger.info("Fetching resources...");
logger.debug("Request payload:", payload);
// Override level at runtime
logger.setLevel(LogLevel.DEBUG);
| Method | Level | Stream | Visible by default |
|---|---|---|---|
logger.debug | DEBUG | stdout | No |
logger.info | INFO | stdout | Yes |
logger.warn | WARN | stdout | Yes |
logger.error | ERROR | stderr | Yes |
Debug output is enabled via DEBUG env var (Node/Bun) or localStorage.debug (browser).
| Export | Description |
|---|---|
OutputFormatter | Structured output in table, JSON, YAML, or plain text |
catchError(promise) | Go-style error handling returning [error, data] tuples |
logger | Cross-platform logger with debug/info/warn/error levels |
trackedAction | Commander.js extension for automatic telemetry tracking |
CommandWalker | CLI command introspection utility |
OutputSink | Abstraction for output destinations |
See the root repository for license information.
FAQs
Common infrastructure needed by uip tools.
The npm package @uipath/common receives a total of 1,954 weekly downloads. As such, @uipath/common popularity was classified as popular.
We found that @uipath/common demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 25 open source maintainers collaborating on the project.

Security News
Two compromised GitHub Actions were re-enabled with malicious tags intact, exposing thousands of downstream repositories to Mini Shai-Hulud.

Research
/Security News
A malicious Firefox extension fetches its payload after installation to evade detection, steal Google session cookies, and automate account takeover.

Research
/Security News
The compromise affects MemTensor's MemOS, an open source memory framework for large language models (LLMs) and AI agents. Both npm package @memtensor/memos-cloud-openclaw-plugin and the PyPI package MemoryOS are compromised. They drop cross-platform Go binaries that exfiltrate developer secrets.