Exploitation Campaign of Vulnerable GitHub Workflows (Campaign)

An unknown, likely AI-enabled threat actor is running an automated campaign that submits malicious pull requests to exploit vulnerable GitHub workflows across open-source projects. The attacker dynamically identifies languages, CI/test configurations, and injection points to add idiomatic malicious code and npm script hooks; the campaign has targeted over 200 repositories, operates at ~7 PRs/hour, and has produced at least two malicious npm releases with an approximate 10% success rate as of 2026-04-03.