Compromised GitHub Actions Came Back Online and Resumed Executing Mini Shai-Hulud Malware
Summary: Two compromised actions-cool GitHub Actions repositories became accessible again on September 16, 2026, between 11:09 a.m. and 6:16 p.m. GMT+2, and their release tags still pointed to malicious content introduced on May 18, so workflows referencing either action by version tag resumed downloading and executing the payload. Socket researcher Karlo Zanki said most affected repositories likely ran the payload within a day of re-enablement, and SafeDep reported six new GitHub repositories infected between September 20 and 24, 2026, through the actions-cool/issues-helper action, which steals CI secrets and commits Claude Code and VS Code hooks into the repository.
Why it matters: No new code was published and no workflow file changed - the malicious tags simply became reachable again, and any workflow still calling these actions by tag ran the payload on its next scheduled run. Six repositories were infected within days, and a developer who pulls the committed hooks runs the malware on their own machine.
Read the original at The Hacker News ↗
- Topics
- Supply Chain & AppSec
- Related
- Kitesurf is now open source Cyber Risks · Nov 13, 2026Trained to betray: How post-training supply chain attacks hijack coding agents Cyber Risks · Nov 12, 2026ZDI-26-913: (0Day) Meta fairseq load_audio_path Code Injection Remote Code Execution Vulnerability Cyber Risks · Nov 11, 2026