# Compromised GitHub Actions Resume Spreading Mini Shai-Hulud Malware

Attackers regained control of compromised GitHub Actions workflows, which came back online and resumed running the "Mini Shai-Hulud" malware. The campaign targets software supply chains by abusing CI/CD pipelines to infect builds and steal credentials. It matters because tampered automation can push malicious code into countless downstream projects and developer environments.

**Importance:** 4/5

## Sources

### Security
- [The Hacker News](https://thehackernews.com/2026/09/compromised-github-actions-came-back.html) — Fri, 25 Sep 2026 20:14:41 +0530