<?xml version="1.0" encoding="UTF-8"?>
<urlset xmlns="http://www.sitemaps.org/schemas/sitemap/0.9" xmlns:news="http://www.google.com/schemas/sitemap-news/0.9">
  <url>
    <loc>https://hackyjs.com/posts/from-trace-spans-to-chargeback-attributing-inference-costs-per-agent</loc>
    <news:news>
      <news:publication>
        <news:name>Hacky JS</news:name>
        <news:language>en</news:language>
      </news:publication>
      <news:publication_date>2026-10-13T00:00:00.000Z</news:publication_date>
      <news:title>From Trace Spans to Chargeback: Attributing Inference Costs per Agent</news:title>
      <news:keywords>ai-agents, observability, llm-costs, opentelemetry, finops</news:keywords>
    </news:news>
  </url>
  <url>
    <loc>https://hackyjs.com/posts/gitlabs-two-99-regex-rce-flaws-a-cicd-maintainers-patch-and-verify-playbook</loc>
    <news:news>
      <news:publication>
        <news:name>Hacky JS</news:name>
        <news:language>en</news:language>
      </news:publication>
      <news:publication_date>2026-10-13T00:00:00.000Z</news:publication_date>
      <news:title>GitLab&apos;s Two 9.9 Regex RCE Flaws: A CI/CD Maintainer&apos;s Patch and Verify Playbook</news:title>
      <news:keywords>gitlab, ci-cd, security, regex, rce</news:keywords>
    </news:news>
  </url>
  <url>
    <loc>https://hackyjs.com/posts/testing-react-193s-browser-against-useeffect-and-dynamic-imports</loc>
    <news:news>
      <news:publication>
        <news:name>Hacky JS</news:name>
        <news:language>en</news:language>
      </news:publication>
      <news:publication_date>2026-10-13T00:00:00.000Z</news:publication_date>
      <news:title>Testing React 19.3&apos;s browser() Against useEffect and Dynamic Imports</news:title>
      <news:keywords>react, react-19, client-only-rendering, hydration, ssr</news:keywords>
    </news:news>
  </url>
  <url>
    <loc>https://hackyjs.com/posts/why-waf-rules-alone-miss-the-bricksforge-wordpress-plugin-rce</loc>
    <news:news>
      <news:publication>
        <news:name>Hacky JS</news:name>
        <news:language>en</news:language>
      </news:publication>
      <news:publication_date>2026-10-13T00:00:00.000Z</news:publication_date>
      <news:title>Why WAF Rules Alone Miss the Bricksforge WordPress Plugin RCE</news:title>
      <news:keywords>wordpress-security, remote-code-execution, waf-bypass, vulnerability-exploitation, incident-response</news:keywords>
    </news:news>
  </url>
</urlset>
