actions-cool/issues-helper
Named by 4 kept items in this workspace.
3 items name it under affected products and 1 under classification.key entities.
Search every workspace for actions-cool/issues-helper. It matches the name as written, so it can find other things that share it.
The items that name it 4
GitHub Action with repointed malicious tags.
Legitimate, trusted GitHub Action whose tags were hijacked (imposter commits); compromised version read /proc/pid/mem to extract secrets and exfiltrated them.
Every tag moved to an imposter commit not reachable from the default branch; imposter commits created within a 3-minute, 16-second window (2026-05-18T19:10:24Z → 19:13:40Z)
All technologies in this workspace.