GitHub Actions re-enabled with Mini Shai-Hulud payload still active
Two third-party GitHub Actions previously compromised in a Mini Shai-Hulud campaign were re-enabled by their maintainer and remained accessible for more than a week despite still pointing to malicious code. [...]
What happened
Two third-party GitHub Actions previously compromised in a Mini Shai-Hulud campaign were re-enabled by their maintainer and remained accessible for more than a week despite still pointing to malicious code. [...]
Why it matters
The development may change operating conditions or market expectations around Security. Further confirmation and measurable outcomes matter.
Affected entities
View evidence
1 reports · 1 original report · 1 independent
- BleepingComputerPrimary source · Supports · EN · 100%GitHub Actions re-enabled with Mini Shai-Hulud payload still active ↗
Claims
- GitHub Actions re-enabled with Mini Shai-Hulud payload still active Observed
Conflicts
No material conflict detected in the available evidence.
Timeline
- First reported
Market move following event
Market reaction is not yet available for this asset and time window.
Score explanation
Confidence · formula confidence-2.1.0
Source trust84
Independent corroboration51
Primary evidence35
Claim consistency82
Extraction confidence82
Attribution quality90
Impact · formula impact-2.1.0
Event magnitude45
Market relevance74
Entity significance42
Market breadth45
Novelty68
Urgency55
Ranking · formula rank-1.0.0
Confidence factor0.847
Freshness factor0.9978
Breaking bonus0