SECURITYQUIET
20 days ago
GitHub Actions re-enabled with Mini Shai-Hulud payload still active
SIGNALSMONITORSECURITY
What's happening
SignalsMonitor is following this as a security story. BleepingComputer is the outlet attached so far. The first report grouped here was at 26 Sept 2026, 14:19 UTC. The headline in use is “GitHub Actions re-enabled with Mini Shai-Hulud payload still active”. This note is SignalsMonitor's own briefing, not the publisher's article.
What we know
Two third-party GitHub Actions previously compromised in a Mini Shai-Hulud campaign were re-enabled by their maintainer and remained accessible for more than a week despite still pointing to malicious code. [...
BleepingComputerRead at BleepingComputer
Story timeline
Reports grouped into this story, earliest first. Exact repeats from the same outlet are collapsed.
- First reported by BleepingComputer
GitHub Actions re-enabled with Mini Shai-Hulud payload still active
Reported by 1 outlet
- BleepingComputer