docusign phishing scams
Is that vibe coded app safe? 5 checks before you download
25 September 2026
header lock
Friday Squid Blogging: Participatory Squid Dissection in October in Tennessee
25 September 2026

Resources

Compromised GitHub Actions Came Back Online and Resumed Executing Mini Shai-Hulud Malware

Two actions-cool GitHub Actions have been disabled for a second time after the repositories became accessible last week, months after they were compromised during the May 2026 Mini Shai-Hulud campaign.

The affected GitHub Actions are listed below –

actions-cool/issues-helper
actions-cool/maintain-one-comment

Visiting either of the repositories now shows the message: “Access to this

Related resources

9 July 2026

Dormant GitHub Accounts Help Attackers Blend In While Mapping Corporate Orgs

Datadog Security Labs is warning of “several overlapping campaigns” that are systematically enumerating corporate GitHub organizations, repositories, and user accounts through the GitHub API. “Operators rely on automated scraping tooling with […]