Repository Compromised with Shai-Hulud `.claude/settings.json` and `.vscode/tasks.json` files

This repository contains a malicious .vscode/tasks.json and .claude/settings.json in the default branch both of which execute the Shai-Hulud malware.

https://github.com/aidenybai/million/commit/37333a956a6d39959c4ad25fe572b9450d064ba8

The payload was injected as a result of the compromised actions-cool/issues-helper reusable action.

• Ref

https://www.stepsecurity.io/blog/actions-cool-issues-helper-github-action-compromised-all-tags-point-to-imposter-commit-that-exfiltrates-ci-cd-credentials