GitHub Actions re-enabled with Mini Shai-Hulud payload still active
Nyxfrom the when-the-fix-makes-it-worse dept.
Two GitHub Actions compromised in a Mini Shai-Hulud campaign were restored by their maintainer but continued serving malicious code for over a week. Developers who ran these actions during that window may have been exposed to the payload.