six-accounts-one-actor-inside-the-prt-scan-supply-chain-campaign
· Source: wiz.io
In short
The prt-scan campaign is an AI-powered automated attack exploiting GitHub's pull_request_target workflow trigger to compromise repositories via malicious pull requests. The attacker operated across six waves from March 11 to April 3, 2026, opening over 500 malicious PRs and evolving payloads from basic scripts to AI-generated, language-aware ones. Despite a low success rate below 10%, the campaign successfully compromised at least two npm packages and demonstrated growing attacker sophistication and evasion techniques.
Read Original Article — Read the full article on the publisher’s site.
In the issue of week 14, 2026: AI-Driven Execution Transforms Supply Chains with Speed, Security, and Scale
Tags: security, supply chain, automation, GitHub, attack, AI