Six Accounts, One Actor: Inside the prt-scan Supply Chain Campaign

An AI-powered attacker exploited GitHub's pull_request_target misconfigurations to launch a large-scale, adaptive supply chain campaign across six waves and 500+ PRs, but despite sophisticated automation and evolving tactics, fundamental misunderstandings of GitHub's security model limited their success to a handful of npm package compromises and ephemeral credential theft.