Securing the Software Supply Chain: From Package-Level Vulnerabilities to AI-Introduced Risk

One poisoned package. Millions of builds. Join senior security leaders in London to unpack how npm attacks and AI are quietly reshaping your risk surface.
“How do we prevent an axios-type attack?”

A single poisoned package can compromise millions of builds, and most teams wouldn’t catch it until it’s already in production.

Now layer in AI. From hallucinated dependencies to AI-generated code, the attack surface is expanding faster than most security teams can respond.

This private executive breakfast brings together senior security and engineering leaders to unpack what’s actually happening inside modern software supply chains and what practical prevention looks like today.
Takeaways
Where recent npm attacks exposed gaps in organizational oversight and control
How AI is introducing new, less visible forms of supply chain risk
Why most organizations are still operating reactively and what that means
What strong, scalable governance actually looks like in practice