Synthèse
Two third-party GitHub Actions previously compromised in a Mini Shai-Hulud campaign were re-enabled by their maintainer and remained accessible for more than a week despite still pointing to malicious code.
Two third-party GitHub Actions previously compromised in a Mini Shai-Hulud campaign were re-enabled by their maintainer and remained accessible for more than a week despite still pointing to malicious code.
Source originale
bleepingcomputer.com
Compromised GitHub Actions Came Back Online and Resumed Executing Mini Shai-Hulud Malware ↗
thehackernews.com · 25 sept.