Source: bleepingcomputer.com
Two third-party GitHub Actions that were previously compromised as part of the Mini Shai-Hulud supply chain campaign were re-enabled by their maintainers despite still containing malicious code. The compromised Actions remained publicly accessible for over a week, exposing any repositories or CI/CD pipelines that referenced them to potential malicious payloads. This incident highlights the risk of supply chain attacks targeting GitHub Actions workflows. The re-enablement of the compromised Actions without remediation suggests a lack of awareness or verification by the maintainers. The Shai-Hulud campaign represents a broader threat to the software supply chain ecosystem, particularly targeting automated build and deployment pipelines.
