Skip to content

Compromised GitHub Actions Came Back Online and Resumed Executing Mini Shai-Hulud Malware

  • by

​Two actions-cool GitHub Actions have been disabled for a second time after the repositories became accessible last week, months after they were compromised during the May 2026 Mini Shai-Hulud campaign.

The affected GitHub Actions are listed below –

actions-cool/issues-helper
actions-cool/maintain-one-comment

Visiting either of the repositories now shows the message: “Access to this Two actions-cool GitHub Actions have been disabled for a second time after the repositories became accessible last week, months after they were compromised during the May 2026 Mini Shai-Hulud campaign.

The affected GitHub Actions are listed below –

actions-cool/issues-helper
actions-cool/maintain-one-comment

Visiting either of the repositories now shows the message: “Access to this  The Hacker News

Leave a Reply

Your email address will not be published. Required fields are marked *