Compromised GitHub Actions from actions-cool Repository Disabled Again After Malware Reactivation

Two GitHub Actions from the actions-cool repository, specifically issues-helper and maintain-one-comment, were disabled for a second time after becoming accessible again last week. These repositories were previously compromised during the Mini Shai-Hulud malware campaign in May 2026. After coming back online, the compromised actions resumed executing the Mini Shai-Hulud malware. The repositories are currently inaccessible, displaying an access restriction message.