Compromised GitHub Actions Came Back Online and Resumed Executing Mini Shai-Hulud Malware

Two actions-cool GitHub Actions have been disabled for a second time after the repositories became accessible last week, months after they were compromised during the May 2026 Mini Shai-Hulud campaign.The affected GitHub Actions are listed below – actions-cool/issues-helper actions-cool/maintain-one-commentVisiting either of the repositories now shows the message: “Access to this

First seen on thehackernews.com

Jump to article: thehackernews.com/2026/09/compromised-github-actions-came-back.html