Two third-party GitHub Actions compromised in the May Mini Shai-Hulud campaign are re-enabled by their maintainer and remain accessible for more than a week despite still pointing to malicious code. GitHub's security team removes actions-cool/issues-helper and actions-cool/maintain-one-comment after the May 18 compromise, preventing downstream workflows from