In this episode of the Secure Disclosure Podcast , host McKenzie sits down with John Amaral, Co-founder and CTO of Root.io. They dive deep into the increasingly complex landscape of open-source supply chain attacks , examining how threat actors like Team PCP leverage AI to weaponize entire package ecosystems. John explains how Root's agentic software factory solves cascading CVE backlogs through precision pinning and automated patch backporting —all capped off with a massive industry merger announcement.Keep your supply chain secure from code to cloud with Aikido Security. Start protecting your ecosystem for free at aikido.dev.