Pakistan's state-sponsored APT36 threat group has adopted an AI-driven methodology, dubbed "vibe-coding," to rapidly generate malicious software. This represents a strategic pivot, as the group now employs an automated "assembly line" approach for malware creation. While the individual malware samples produced via vibe-coding are reportedly mediocre in their technical sophistication, their sheer volume presents a substantial operational challenge to defenders. This capability to swiftly churn out a vast quantity of unique malware instances threatens to overwhelm traditional defensive postures and detection systems, shifting the calculus from individual exploit quality to the adversary's overall operational scale1. Such a development underscores an evolving threat landscape where nation-state actors, even those not traditionally at the forefront of advanced technical exploits, can significantly amplify their disruptive potential through automation. The strategic embrace of AI for mass malware production by APT36 elevates the threat from localized incidents to a potential deluge of pervasive, albeit simpler, attacks. For cybersecurity practitioners, this necessitates a critical focus on scalable detection and automated response mechanisms, capable of addressing high-volume, low-complexity threats and adapting defenses to this new paradigm of automated adversary output.