In this episode of The Secure Disclosure, host Mackenzie Jackson dives deep into the evolving intersection of AI, security, and development. First, Paul McCarty from Git Safety breaks down his recent discovery of a malicious npm package that impersonated the Claude CLI tool, hijacking developer workflows and acting as a man-in-the-middle for AI API calls. You can read Paul’s full breakdown here: “Malicious Claude Code Package Analysis” – https://www.getsafety.com/blog-posts/malicious-claude-code-package Next, Sooraj Shah from Aikido Security joins to unpack findings from the State of AI in Security & Development 2026 Report, which surveyed 450 CISOs about how AI-generated code is reshaping security accountability, visibility, and optimism in the field. Check out the full report here: https://www.aikido.dev/state-of-ai-security-development-2026 This episode explores real-world AI supply chain threats, systemic vulnerabilities in npm, and what organizations must do to stay ahead as AI reshapes modern development. Follow the guests: Follow Mackenzie: https://www.linkedin.com/in/advocatemack/ Follow Paul: https://www.linkedin.com/in/mccartypaul/ Follow Sooraj: https://www.linkedin.com/in/soorajshah/ Chapters 00:00 Introduction 01:19 Paul McCarty on the malicious Claude npm package 04:30 How AI tools are creating new attack paths 08:06 Systemic issues and trust problems in npm 10:44 Sooraj Shah on the State of AI in Security & Development 14:01 Accountability, optimism, and the future of AI security