<?xml version="1.0" encoding="UTF-8"?>
<urlset xmlns="http://www.sitemaps.org/schemas/sitemap/0.9" xmlns:news="http://www.google.com/schemas/sitemap-news/0.9">
  <url>
    <loc>https://hackyjs.com/posts/a-cost-aware-model-router-in-javascript-routing-between-local-mac-mini-models-and-cheap-cloud-tiers</loc>
    <news:news>
      <news:publication>
        <news:name>Hacky JS</news:name>
        <news:language>en</news:language>
      </news:publication>
      <news:publication_date>2026-09-27T00:00:00.000Z</news:publication_date>
      <news:title>A Cost-Aware Model Router in JavaScript: Routing Between Local Mac Mini Models and Cheap Cloud Tiers</news:title>
      <news:keywords>javascript, model-routing, local-inference, llm-cost, apple-silicon</news:keywords>
    </news:news>
  </url>
  <url>
    <loc>https://hackyjs.com/posts/auditing-ai-browsing-agents-for-confused-deputy-failures-before-production</loc>
    <news:news>
      <news:publication>
        <news:name>Hacky JS</news:name>
        <news:language>en</news:language>
      </news:publication>
      <news:publication_date>2026-09-27T00:00:00.000Z</news:publication_date>
      <news:title>Auditing AI Browsing Agents for Confused Deputy Failures Before Production</news:title>
      <news:keywords>ai-agents, security, confused-deputy, authorization, audit-logging</news:keywords>
    </news:news>
  </url>
  <url>
    <loc>https://hackyjs.com/posts/detecting-netscaler-rce-exploitation-on-citrix-adc-before-a-patch-exists</loc>
    <news:news>
      <news:publication>
        <news:name>Hacky JS</news:name>
        <news:language>en</news:language>
      </news:publication>
      <news:publication_date>2026-09-27T00:00:00.000Z</news:publication_date>
      <news:title>Detecting NetScaler RCE Exploitation on Citrix ADC Before a Patch Exists</news:title>
      <news:keywords>netscaler, citrix, zero-day, detection-engineering, incident-response</news:keywords>
    </news:news>
  </url>
  <url>
    <loc>https://hackyjs.com/posts/the-golden-spike-what-emitting-rust-instead-of-llvm-ir-buys-and-breaks</loc>
    <news:news>
      <news:publication>
        <news:name>Hacky JS</news:name>
        <news:language>en</news:language>
      </news:publication>
      <news:publication_date>2026-09-27T00:00:00.000Z</news:publication_date>
      <news:title>The Golden Spike: What Emitting Rust Instead of LLVM IR Buys and Breaks</news:title>
      <news:keywords>rust, compilers, programming-languages, llvm, toolchains</news:keywords>
    </news:news>
  </url>
  <url>
    <loc>https://hackyjs.com/posts/anatomy-of-a-self-propagating-npm-and-pypi-worm-that-hijacked-agent-memory</loc>
    <news:news>
      <news:publication>
        <news:name>Hacky JS</news:name>
        <news:language>en</news:language>
      </news:publication>
      <news:publication_date>2026-09-26T00:00:00.000Z</news:publication_date>
      <news:title>Anatomy of a Self-Propagating npm and PyPI Worm That Hijacked Agent Memory</news:title>
      <news:keywords>npm, pypi, supply-chain-security, ai-agents, malware</news:keywords>
    </news:news>
  </url>
  <url>
    <loc>https://hackyjs.com/posts/measuring-tokens-per-task-in-javascript-agents-with-per-step-cost-tracing-and-budget-limits</loc>
    <news:news>
      <news:publication>
        <news:name>Hacky JS</news:name>
        <news:language>en</news:language>
      </news:publication>
      <news:publication_date>2026-09-26T00:00:00.000Z</news:publication_date>
      <news:title>Measuring Tokens-per-Task in JavaScript Agents with Per-Step Cost Tracing and Budget Limits</news:title>
      <news:keywords>javascript, ai-agents, token-economics, observability, cost-optimization</news:keywords>
    </news:news>
  </url>
  <url>
    <loc>https://hackyjs.com/posts/region-selection-is-now-a-compliance-decision-californias-data-center-package-and-virginia-eo-22</loc>
    <news:news>
      <news:publication>
        <news:name>Hacky JS</news:name>
        <news:language>en</news:language>
      </news:publication>
      <news:publication_date>2026-09-26T00:00:00.000Z</news:publication_date>
      <news:title>Region Selection Is Now a Compliance Decision: California&apos;s Data Center Package and Virginia EO 22</news:title>
      <news:keywords>data-centers, cloud-compliance, ai-infrastructure, regulation, region-selection</news:keywords>
    </news:news>
  </url>
  <url>
    <loc>https://hackyjs.com/posts/what-breaks-when-you-compile-typescript-to-a-native-binary-with-scriptc</loc>
    <news:news>
      <news:publication>
        <news:name>Hacky JS</news:name>
        <news:language>en</news:language>
      </news:publication>
      <news:publication_date>2026-09-26T00:00:00.000Z</news:publication_date>
      <news:title>What Breaks When You Compile TypeScript to a Native Binary with scriptc</news:title>
      <news:keywords>typescript, compilers, native-code, tooling, vercel</news:keywords>
    </news:news>
  </url>
</urlset>
