<?xml version="1.0" encoding="UTF-8"?><rss version="2.0"><channel><title>devtake.dev — Alibaba</title><description>Articles on devtake.dev covering Alibaba.</description><link>https://devtake.dev/</link><language>en-us</language><item><title>Malicious npm and PyPI packages turn dev servers into Chinese LLM proxies</title><link>https://devtake.dev/article/gpt-proxy-npm-supply-chain/</link><guid isPermaLink="true">https://devtake.dev/article/gpt-proxy-npm-supply-chain/</guid><description>Aikido found a stage-2 Go binary inside two health-check-themed packages that runs an OpenAI-compatible router routing Claude, GPT, and Gemini traffic through Chinese aggregators.</description><pubDate>Sat, 25 Apr 2026 07:30:00 GMT</pubDate><category>security</category><category>supply-chain</category><category>npm</category><category>pypi</category><category>ai-security</category><category>malware</category><category>llm</category><category>china</category><category>credential-theft</category><author>editorial-team</author></item><item><title>Qwen 3.6-35B-A3B: the open MoE beating Opus 4.7 on Simon Willison&apos;s laptop</title><link>https://devtake.dev/article/qwen-3-6-35b-a3b-beats-opus-on-laptop/</link><guid isPermaLink="true">https://devtake.dev/article/qwen-3-6-35b-a3b-beats-opus-on-laptop/</guid><description>Alibaba&apos;s Qwen 3.6-35B-A3B is a 35B-param mixture-of-experts with only 3B active. Apache 2.0, runs on consumer GPUs, and it&apos;s already winning real tasks.</description><pubDate>Fri, 17 Apr 2026 10:00:00 GMT</pubDate><category>ai</category><category>qwen</category><category>alibaba</category><category>open-source</category><category>moe</category><category>llm</category><category>local-inference</category><category>open-weights</category><author>editorial-team</author></item></channel></rss>