Compromised GitHub Actions re-enabled, posing supply chain risks

The compromised GitHub Actions were originally disabled on May 18, 2026, after being found to execute malicious code that harvested sensitive credentials from CI/CD pipelines.