Auditing the MCP Supply Chain

Every MCP server you install pulls in a supply chain you don't see: the npm or PyPI packages it depends on, the registry you fetched it from, and the official SDK it's built on.

Most teams never audit any of it. In 2026 that gap turned into real incidents.
- The postmark-mcp package silently BCC'd emails from 300+ organizations
- The Smithery registry breach exposed credentials for 3,243 hosted MCP apps through a single path traversal
- A design flaw in the official MCP SDKs allowed command execution over the STDIO transport, across 150 million downloads.

OWASP now lists supply chain as its own entry, MCP04, separate from tool poisoning and prompt injection.

This talk maps the MCP supply chain attack surface across its three layers: package, registry, and SDK and shows how to audit each one.

We'll cover what SBOM tooling catches, where it falls short on MCP specifically, and what a practical defense stack looks like in production.

You'll leave knowing how to audit an MCP server before you trust it.

I'll be at AGNTcon + MCPcon China today!

yesterday PyCon went well, even though I made slides last minute haha. Well no time to rest but still best not to leave any opportunity

I'll be speaking here tomorrow on- Auditing the MCP supply Chain

For today, just meeting folks here. If you are here too, let's have a chat :)

pic- from my walk to Bund in the morning trying to find Luckin coffee nearby

Sharing through some August updates and reflections

A lot has happened this month and since I am getting old (closing 22 soon), I have lost my ability to larp. Which I will def try, but here I go consolidating everything-

1/ Some recent updates:

- I'll be in Shanghai for AGNTcon + MCPcon China in the first week of September to talk about Auditing the MCP Supply Chain. China finally yayyy ''
- Speaking at AGNTcon + MCPcon Japan '' in the second week of September on Stateless MCP: Inside the 2026 Transport Spec
- Speaking at KCD Gujarat on Scaling LLM Inference on Kubernetes with KV-Cache-Aware Routing, September 19
- Recently became a Cursor Ambassador!
- Hosting a Cafe Cursor on August 29
- My talk Measuring Valkey Saturation With Active-Time and Eventloop Metrics in 9.1 got selected for ValkeyConf, so Prague'' in October if my visa works out in the limited time I have TT
- Finally started working on my personal website. Been confused about how to design it, but finally have some ideas.
- Mem0 has been fun, currently working on integrations.
- Joined a Chinese language learning school. Online for now, but gonna start getting serious about it.
- Exploring DeepSeek Harness and Cursor Origin. Such interesting launches with so much engineering/research content.

__

2/ Some reflections:

a. It's finally been a year since I started my corporate journey (last Aug). Though I was working in uni and all, let's not consider that. It's been a rewarding experience. I'm glad I locked in around June/July last year and I've seen huge changes since then.

b. It'll be one year at the end of September since I took my first flight ever, and it was a direct international one lol. Not sure how I hadn't travelled through air before. Solo travel has been extremely fun!!!! I've been to 8 countries in less than a year, with 2 upcoming. I've also been working during my travels, and it keeps me pretty fresh-minded.

c. I really took my health and body for granted :(
I'm not really smart by nature, so my usual way of coping has been putting in double the hours and sacrificing sleep. My body does not show any good signs for my age.

d. I'll be 23 soon FAHHHH. I wanted to do better before reaching unc status, but it's been okay. Not regretful at least. I'll keep figuring things out as I go.

__

3/ What's next:

- Take the last 2 months slower, focus mainly on Mem0 + recurring work and get my health on track
- Maybe a long-term stay somewhere (long = 2 months hehe)
- Pick up some non-AI creative thing
- Dig into AI research better
I have nothing figured out, im 'on the go' person

A funny thingy:

Was going to speak at KCD Hanoi ''(July end)'booked flights/hotel' got my visa 8 hours before the flight ' rushed Pune to Mumbai (6hrs) ' wasn't allowed to board because my middle name wasn't on the visa.

Surprisingly, Vietnam doesn't support corrections, so all gone. Was irritated, had some good food (10k+ cal), and all good.

pic: SG