Compromised GitHub Actions Came Back Online and Resumed Executing Mini Shai-Hulud Malware

Two actions-cool GitHub Actions were disabled for a second time after their repositories became accessible again, months after being compromised in the May 2026 Mini Shai-Hulud campaign. The affected actions, issues-helper and maintain-one-comment, now show an access-denied message, as maintainers work to secure them against further abuse.