TLDR Tech / InfoSec
Six Accounts, One Actor: Inside the prt-scan Supply Chain Campaign
Wiz Research uncovered a 'prt-scan' supply chain campaign that used six GitHub accounts and over 500 malicious pull requests to exploit `pull_request_target`. This campaign, targeting Python, Node.js, Rust, and Go projects, aimed to steal AWS, Cloudflare, and Netlify credentials by exfiltrating secrets via PR comments. Defenders should look for specific branch and PR title patterns and enhance security on repositories using `pull_request_target`.
Read the full story