Скачать или смотреть Secure Code and AI - Paul McCarty & Sooraj Shah on Securing AI Code

In this episode of The Secure Disclosure, host Mackenzie Jackson dives deep into the evolving intersection of AI, security, and development.
First, Paul McCarty from Git Safety breaks down his recent discovery of a malicious npm package that impersonated the Claude CLI tool, hijacking developer workflows and acting as a man-in-the-middle for AI API calls. You can read Paul’s full breakdown here: “Malicious Claude Code Package Analysis” – https://www.getsafety.com/blog-posts/...

Next, Sooraj Shah from Aikido Security joins to unpack findings from the State of AI in Security & Development 2026 Report, which surveyed 450 CISOs about how AI-generated code is reshaping security accountability, visibility, and optimism in the field. Check out the full report here: https://www.aikido.dev/state-of-ai-se...

This episode explores real-world AI supply chain threats, systemic vulnerabilities in npm, and what organizations must do to stay ahead as AI reshapes modern development.

Follow the guests:
Follow Mackenzie:   / advocatemack  
Follow Paul:   / mccartypaul  
Follow Sooraj:   / soorajshah  

Chapters

00:00 Introduction
01:19 Paul McCarty on the malicious Claude npm package
04:30 How AI tools are creating new attack paths
08:06 Systemic issues and trust problems in npm
10:44 Sooraj Shah on the State of AI in Security & Development
14:01 Accountability, optimism, and the future of AI security