Compromised GitHub Actions Returned With Mini Shai-Hulud Malware
Two compromised GitHub Actions were re-enabled with malicious tags intact, allowing Mini Shai-Hulud code to run again. Here’s what DevOps teams should check and how to harden workflows.