Compromised GitHub Actions Disabled Again After Resuming Mini Shai-Hulud Malware

Two actions-cool GitHub Actions, issues-helper and maintain-one-comment, have been disabled for a second time after their repositories became accessible last week. They were compromised during the May 2026 Mini Shai-Hulud campaign and resumed executing malware.

• actions-cool/issues-helper and actions-cool/maintain-one-comment were disabled again
• Repositories were compromised in the May 2026 Mini Shai-Hulud campaign
• Actions resumed executing malware after access was restored
• Both repositories are now blocked again