AI-Assisted Supply Chain Attack Targets GitHub

Multiple DarkReading reports highlight an urgent surge in supply-chain and AI-enabled attacks across open source ecosystems, cloud services, and endpoint software. Notable incidents include an AI-assisted GitHub targeting campaign (PRT-scan), a precision compromise of the Axios NPM package, an emergency FortiClient authentication-bypass zero-day (CVE-2026-35616) being patched and exploited in the wild, automated credential-harvesting campaigns exploiting React2Shell on Next.js apps, and the reclassification/active exploitation of F5 BIG-IP (CVE-2025-53521) as an RCE. Coverage also flags AI‑dr‑