AI-Assisted Supply Chain Attack Targets GitHub

A threat actor used AI-assisted automation to open hundreds of malicious pull requests targeting repositories that use GitHub Actions' pull_request_target trigger. Wiz tracked the campaign as "prt-scan," observed roughly 475 malicious PRs across six waves beginning March 11, noted about a 10% success rate that led to dozens of compromises (mostly small projects and ephemeral credentials), and published IoCs plus hardening recommendations.