Supply-chain compromise affecting an organization (Software Development)

Two GitHub Actions repositories from actions-cool were compromised and used to distribute Mini Shai-Hulud malware. The compromised actions were disabled, became accessible again, and resumed malicious execution before being disabled a second time.

Sources

• Primary source on file. It names the organization, so it is not linked while this entry is anonymized.
• Upstream: Security news (RSS + Claude). The upstream record names the organization, so it is not linked here.
• Candidate incidents extracted from public security reporting; every entry links its article