Skip to content
Six Accounts, One Actor: Inside the prt-scan Supply Chain Campaign
wiz.io | blog | #ai-security | #supply-chain | #github-actions | #npm | #ci-cd | #wiz | #threat-actor | #pull-request-target
Summary
Wiz Research traced six waves of pull_request_target exploitation to one actor three weeks before disclosure: 500+ PRs, two npm packages hit, payloads evolving from bash to AI-generated.
- Published
- Collected