<?xml version="1.0" encoding="UTF-8"?><rss version="2.0"><channel><title>devtake.dev — #slopsquatting</title><description>Articles tagged slopsquatting on devtake.dev.</description><link>https://devtake.dev/</link><language>en-us</language><item><title>Unclaimed package names: Claude and Codex ran a stranger&apos;s code inside Fortune 500 networks</title><link>https://devtake.dev/article/ai-agents-unowned-packages-corporate/</link><guid isPermaLink="true">https://devtake.dev/article/ai-agents-unowned-packages-corporate/</guid><description>Alon Hertz registered package names that corporate docs told AI agents to install. Claude, Codex and Hermes fetched and ran the code within the hour.</description><pubDate>Tue, 01 Sep 2026 08:15:00 GMT</pubDate><category>security</category><category>security</category><category>supply-chain</category><category>ai-security</category><category>ai-agents</category><category>npm</category><category>pypi</category><category>codex</category><category>slopsquatting</category><author>luca-reinhardt</author></item></channel></rss>