Security
Two GitHub Actions came back online for nine days with live malware
Two third-party actions pulled after the Mini Shai-Hulud campaign were restored on 16 September without cleaning their tags. For nine days, any workflow calling them re-ran May's payload.