<?xml version="1.0" encoding="UTF-8"?><rss version="2.0"><channel><title>devtake.dev — Clerk</title><description>Articles on devtake.dev covering Clerk.</description><link>https://devtake.dev/</link><language>en-us</language><item><title>Unclaimed package names: Claude and Codex ran a stranger&apos;s code inside Fortune 500 networks</title><link>https://devtake.dev/article/ai-agents-unowned-packages-corporate/</link><guid isPermaLink="true">https://devtake.dev/article/ai-agents-unowned-packages-corporate/</guid><description>Alon Hertz registered package names that corporate docs told AI agents to install. Claude, Codex and Hermes fetched and ran the code within the hour.</description><pubDate>Tue, 01 Sep 2026 08:15:00 GMT</pubDate><category>security</category><category>security</category><category>supply-chain</category><category>ai-security</category><category>ai-agents</category><category>npm</category><category>pypi</category><category>codex</category><category>slopsquatting</category><author>luca-reinhardt</author></item><item><title>Cloudflare opened OAuth to every developer on its platform</title><link>https://devtake.dev/article/cloudflare-oauth-for-all/</link><guid isPermaLink="true">https://devtake.dev/article/cloudflare-oauth-for-all/</guid><description>Cloudflare now lets any developer build a real OAuth login against its API, ending a partner-only gate. Here&apos;s what that fixes and the catch.</description><pubDate>Thu, 25 Jun 2026 17:41:00 GMT</pubDate><category>web</category><category>cloudflare</category><category>oauth</category><category>authentication</category><category>workers</category><category>identity</category><category>dev-tools</category><author>naomi-park</author></item></channel></rss>