Mini Shai-Hulud Worm Compromises Major Software Ecosystems via CI/CD Exploit

This incident marks a dangerous evolution in supply chain attacks by weaponizing GitHub Actions and OIDC to distribute 'verified' malicious packages. It forces a critical re-evaluation of automated publishing trust models as attackers shift focus from simple typosquatting to hijacking legitimate CI/CD runners.