Open Source · · 1 day

UiPath npm packages carried Shai-Hulud

JFrog listed 66 UiPath npm packages in the May 2026 Shai-Hulud wave. This record scopes those artifacts to their own official distribution surface.

Part of Shai-Hulud hits npm and PyPI campaign

UiPath was one of the largest namespace entries in the May 2026 Shai-Hulud wave. JFrog listed 66 affected @uipath/* npm packages, spanning access-policy tools, admin tooling, agent packages, chat components, and other automation-adjacent modules.

That breadth matters because UiPath packages are likely to be used by teams building automation and integration workflows. Those environments often contain service credentials, repository tokens, cloud configuration, and deployment authority. Shai-Hulud's install-time payload was designed to harvest exactly that context and use any publishing access it found.

This record keeps the UiPath namespace as a separate trust boundary rather than burying it inside the campaign total. The campaign page carries TeamPCP's shared loader, infrastructure, credential theft, and self-propagation behavior; this page preserves the exact package list, versions, registry paths, and May 11-12 exposure window.

Response should start with a namespace-wide inventory sweep. Lockfiles, package caches, private mirrors, build images, and CI logs should be checked for the listed @uipath/* packages, and any installing environment with package-publishing or deployment authority should be treated as a possible source of further compromise.

Notes

  • The network and payload indicators are the campaign-level set JFrog published for this wave, not observations of this package's own bytes. They identify the wave's infrastructure and persistence, and are recorded here so each affected distribution surface carries them. Where a record also lists indicators read from an acquired sample, those are marked as such.
  • Minimal campaign-linked record created to keep Shai-Hulud package evidence scoped by vendor, organization, maintainer account, or package distribution surface.

Appendix · Affected releases

@uipath/auth npm
1.0.1 sha256 57bb8c05…b5dc6133 download unavailable
@uipath/cli npm
1.0.1 sha256 d9e51482…5c42eb12 download unavailable
@uipath/vss npm
0.1.6 sha256 7a673295…95c6f9d0 download unavailable

Indicators

  • file_sha256npm payload 29c729852fce5a53e30a1541d9fec79c915b2e13f1eda94a5978cf0aae0d88d9
  • file_sha256npm payload 2ec78d556d696e208927cc503d48e4b5eb56b31abc2870c2ed2e98d6be27fc96
  • file_sha256npm payload ab4fcadaec49c03278063dd269ea5eef82d24f2124a8e15d7b90f2fa8601266c
  • file_sha256npm payload d4a2086ea18f5e39cd867b8b06918a524eabb21d45ea98aad07357b98173458a
  • urlhttps://filev2.getsession.org/file/
  • domainseed1.getsession.org
  • domainseed2.getsession.org
  • domainseed3.getsession.org
  • domainapi.masscan.cloud
  • file~/.local/bin/gh-token-monitor.sh
  • file~/.config/systemd/user/gh-token-monitor.service
  • file~/Library/LaunchAgents/com.user.gh-token-monitor.plist
  • file~/.config/gh-token-monitor/
  • stringShai-Hulud: Here We Go Again
  • stringPUSH UR T3MPRR
  • stringFIRESCALE
  • commit_authorclaude@users.noreply.github.com

References

  1. Shai-Hulud: Here We Go Again - Worm by TeamPCP Hits NPM and PyPIresearch.jfrog.com
  2. TanStack npm Packages Compromised in Ongoing Mini Shai-Hulud Supply Chain Attack - Socketsocket.dev
  3. Socket package file listing for @uipath/access-policy-sdk 0.3.1socket.dev
  4. Socket package file listing for @uipath/access-policy-tool 0.3.1socket.dev
  5. Socket package file listing for @uipath/admin-tool 0.1.1socket.dev
  6. Socket package file listing for @uipath/agent-sdk 1.0.2socket.dev
  7. Socket package file listing for @uipath/agent-tool 1.0.1socket.dev
  8. Socket package file listing for @uipath/agent.sdk 0.0.18socket.dev
  9. Socket package file listing for @uipath/aops-policy-tool 0.3.1socket.dev
  10. Socket package file listing for @uipath/ap-chat 1.5.7socket.dev
  11. Socket package file listing for @uipath/api-workflow-tool 1.0.1socket.dev
  12. Socket package file listing for @uipath/apollo-core 5.9.2socket.dev
  13. Socket package file listing for @uipath/apollo-react 4.24.5socket.dev
  14. Socket package file listing for @uipath/apollo-wind 2.16.2socket.dev
  15. Socket package file listing for @uipath/auth 1.0.1socket.dev
  16. Socket package file listing for @uipath/case-tool 1.0.1socket.dev
  17. Socket package file listing for @uipath/cli 1.0.1socket.dev
  18. Socket package file listing for @uipath/codedagent-tool 1.0.1socket.dev
  19. Socket package file listing for @uipath/codedagents-tool 0.1.12socket.dev
  20. Socket package file listing for @uipath/codedapp-tool 1.0.1socket.dev
  21. Socket package file listing for @uipath/common 1.0.1socket.dev
  22. Socket package file listing for @uipath/context-grounding-tool 0.1.1socket.dev
  23. Socket package file listing for @uipath/data-fabric-tool 1.0.2socket.dev
  24. Socket package file listing for @uipath/docsai-tool 1.0.1socket.dev
  25. Socket package file listing for @uipath/filesystem 1.0.1socket.dev
  26. Socket package file listing for @uipath/flow-tool 1.0.2socket.dev
  27. Socket package file listing for @uipath/functions-tool 1.0.1socket.dev
  28. Socket package file listing for @uipath/gov-tool 0.3.1socket.dev
  29. Socket package file listing for @uipath/identity-tool 0.1.1socket.dev
  30. Socket package file listing for @uipath/insights-sdk 1.0.1socket.dev
  31. Socket package file listing for @uipath/insights-tool 1.0.1socket.dev
  32. Socket package file listing for @uipath/integrationservice-sdk 1.0.2socket.dev
  33. Socket package file listing for @uipath/integrationservice-tool 1.0.2socket.dev
  34. Socket package file listing for @uipath/llmgw-tool 1.0.1socket.dev
  35. Socket package file listing for @uipath/maestro-sdk 1.0.1socket.dev
  36. Socket package file listing for @uipath/maestro-tool 1.0.1socket.dev
  37. Socket package file listing for @uipath/orchestrator-tool 1.0.1socket.dev
  38. Socket package file listing for @uipath/packager-tool-apiworkflow 0.0.19socket.dev
  39. Socket package file listing for @uipath/packager-tool-bpmn 0.0.9socket.dev
  40. Socket package file listing for @uipath/packager-tool-case 0.0.9socket.dev
  41. Socket package file listing for @uipath/packager-tool-connector 0.0.19socket.dev
  42. Socket package file listing for @uipath/packager-tool-flow 0.0.19socket.dev
  43. Socket package file listing for @uipath/packager-tool-functions 0.1.1socket.dev
  44. Socket package file listing for @uipath/packager-tool-webapp 1.0.6socket.dev
  45. Socket package file listing for @uipath/packager-tool-workflowcompiler 0.0.16socket.dev
  46. Socket package file listing for @uipath/packager-tool-workflowcompiler-browser 0.0.34socket.dev
  47. Socket package file listing for @uipath/platform-tool 1.0.1socket.dev
  48. Socket package file listing for @uipath/project-packager 1.1.16socket.dev
  49. Socket package file listing for @uipath/resource-tool 1.0.1socket.dev
  50. Socket package file listing for @uipath/resourcecatalog-tool 0.1.1socket.dev
  51. Socket package file listing for @uipath/resources-tool 0.1.11socket.dev
  52. Socket package file listing for @uipath/robot 1.3.4socket.dev
  53. Socket package file listing for @uipath/rpa-legacy-tool 1.0.1socket.dev
  54. Socket package file listing for @uipath/rpa-tool 0.9.5socket.dev
  55. Socket package file listing for @uipath/solution-packager 0.0.35socket.dev
  56. Socket package file listing for @uipath/solution-tool 1.0.1socket.dev
  57. Socket package file listing for @uipath/solutionpackager-sdk 1.0.11socket.dev
  58. Socket package file listing for @uipath/solutionpackager-tool-core 0.0.34socket.dev
  59. Socket package file listing for @uipath/tasks-tool 1.0.1socket.dev
  60. Socket package file listing for @uipath/telemetry 0.0.7socket.dev
  61. Socket package file listing for @uipath/test-manager-tool 1.0.2socket.dev
  62. Socket package file listing for @uipath/tool-workflowcompiler 0.0.12socket.dev
  63. Socket package file listing for @uipath/traces-tool 1.0.1socket.dev
  64. Socket package file listing for @uipath/ui-widgets-multi-file-upload 1.0.1socket.dev
  65. Socket package file listing for @uipath/uipath-python-bridge 1.0.1socket.dev
  66. Socket package file listing for @uipath/vertical-solutions-tool 1.0.1socket.dev
  67. Socket package file listing for @uipath/vss 0.1.6socket.dev
  68. Socket package file listing for @uipath/widget.sdk 1.2.3socket.dev
  69. Mini Shai-Hulud Is Back: npm Worm Hits over 160 Packages, including Mistral and Tanstack - Aikidoaikido.dev

Source record: oss/attacks/shai-hulud-uipath-npm/meta.yaml