<?xml version="1.0" encoding="UTF-8"?><rss version="2.0"><channel><title>devtake.dev — PyPI</title><description>Articles on devtake.dev covering PyPI.</description><link>https://devtake.dev/</link><language>en-us</language><item><title>Unclaimed package names: Claude and Codex ran a stranger&apos;s code inside Fortune 500 networks</title><link>https://devtake.dev/article/ai-agents-unowned-packages-corporate/</link><guid isPermaLink="true">https://devtake.dev/article/ai-agents-unowned-packages-corporate/</guid><description>Alon Hertz registered package names that corporate docs told AI agents to install. Claude, Codex and Hermes fetched and ran the code within the hour.</description><pubDate>Tue, 01 Sep 2026 08:15:00 GMT</pubDate><category>security</category><category>security</category><category>supply-chain</category><category>ai-security</category><category>ai-agents</category><category>npm</category><category>pypi</category><category>codex</category><category>slopsquatting</category><author>luca-reinhardt</author></item><item><title>Malicious npm and PyPI packages turn dev servers into Chinese LLM proxies</title><link>https://devtake.dev/article/gpt-proxy-npm-supply-chain/</link><guid isPermaLink="true">https://devtake.dev/article/gpt-proxy-npm-supply-chain/</guid><description>Aikido found a stage-2 Go binary inside two health-check-themed packages that runs an OpenAI-compatible router routing Claude, GPT, and Gemini traffic through Chinese aggregators.</description><pubDate>Sat, 25 Apr 2026 07:30:00 GMT</pubDate><category>security</category><category>supply-chain</category><category>npm</category><category>pypi</category><category>ai-security</category><category>malware</category><category>llm</category><category>china</category><category>credential-theft</category><author>luca-reinhardt</author></item></channel></rss>