GitHub Actions re-enabled with Mini Shai-Hulud payload still active
From BleepingComputer to All on Sat Sep 26 11:09:37 2026
Two third-party GitHub Actions previously compromised in a Mini Shai-Hulud campaign were re-enabled by their maintainer and remained accessible for more than a week despite still pointing to malicious code. [...]