security3 publishers
Two actions-cool GitHub Actions resumed running the Mini Shai-Hulud stealer after coming back online
Two actions-cool GitHub Actions hijacked on May 18 came back online on September 16, still serving the Mini Shai-Hulud stealer to tag-pinned workflows. Only workflows pinned to a pre-May 18 commit SHA escaped; the rest have CI secrets to rotate.
Perspective Coverage
3 publishers- Builder
- Builder 48%
- Operator
- Operator 47%
- Investor
- Investor 5%
Reality
- Evidence64
- Adoption45
- Hype gap+15
- Incentives40
- Confidence66