actions-cool/maintain-one-comment

Reactivated Compromised GitHub Actions Reintroduced Mini Shai-Hulud Payload into Build Pipelines

Two previously compromised GitHub Actions were reactivated and continued for more than a week to point to a malicious payload capable of execution within workflows. Researchers recommend removing the actions or pinning them to a trusted version, reviewing runs, and rotating secrets.