supply-chain
Compromised GitHub Actions Came Back Online and Resumed Executing Mini Shai-Hulud Malware
Medium
Summary
Two compromised GitHub Actions, originally exploited during the Mini Shai-Hulud campaign in May 2026, have been re-enabled, but the malicious code remains within the repositories and continues to execute workflows without requiring any new exploits or infrastructure changes.
Summary written automatically in our own words from the original article, which belongs to its publisher and remains the reference. It may contain errors. Sources & data