Compromised GitHub Actions re-enabled with active malware payload

Two third-party GitHub Actions previously compromised in a Mini Shai-Hulud campaign were re-enabled by their maintainer. They remained accessible for over a week while still pointing to malicious code, posing a significant risk to CI/CD pipelines and software supply chains.