Returns a paginated list of supply chain attack campaigns. Supports filtering
by status, ecosystem, and an incremental sync parameter (updated_after).

Package PURLs are not inlined on the campaign object — they are their own
paginated resource. Fetch them per campaign from
/threat-campaigns/:campaign_id/packages.

Authentication: Organization API token, OAuth2, or NextAuth session.
Required token scope: threat-campaigns:list.

This endpoint requires an Enterprise Plan with the Threat Feed add-on.