<?xml version="1.0" encoding="UTF-8"?>
<urlset xmlns="http://www.sitemaps.org/schemas/sitemap/0.9" xmlns:news="http://www.google.com/schemas/sitemap-news/0.9">
  <url>
    <loc>https://hackyjs.com/posts/benchmarking-joey-1-on-throughput-retries-and-total-cost-before-you-swap-models</loc>
    <news:news>
      <news:publication>
        <news:name>Hacky JS</news:name>
        <news:language>en</news:language>
      </news:publication>
      <news:publication_date>2026-10-30T00:00:00.000Z</news:publication_date>
      <news:title>Benchmarking joey-1 on Throughput, Retries, and Total Cost Before You Swap Models</news:title>
      <news:keywords>ai, inference, benchmarking, llm-cost, baseten</news:keywords>
    </news:news>
  </url>
  <url>
    <loc>https://hackyjs.com/posts/open-weights-licensed-hosting-auditing-mistral-large-4s-terms-for-commercial-api-builders</loc>
    <news:news>
      <news:publication>
        <news:name>Hacky JS</news:name>
        <news:language>en</news:language>
      </news:publication>
      <news:publication_date>2026-10-30T00:00:00.000Z</news:publication_date>
      <news:title>Open Weights, Licensed Hosting: Auditing Mistral Large 4&apos;s Terms for Commercial API Builders</news:title>
      <news:keywords>mistral, open-weights, ai-licensing, model-hosting, api-development</news:keywords>
    </news:news>
  </url>
  <url>
    <loc>https://hackyjs.com/posts/auditing-github-issue-automation-after-a-61-repo-supply-chain-campaign</loc>
    <news:news>
      <news:publication>
        <news:name>Hacky JS</news:name>
        <news:language>en</news:language>
      </news:publication>
      <news:publication_date>2026-10-30T00:00:00.000Z</news:publication_date>
      <news:title>Auditing GitHub Issue Automation After a 61-Repo Supply-Chain Campaign</news:title>
      <news:keywords>github, supply-chain, ci-cd, automation, security</news:keywords>
    </news:news>
  </url>
  <url>
    <loc>https://hackyjs.com/posts/auditing-the-npm-trust-chain-after-chaindrop-tokens-oidc-and-postinstall</loc>
    <news:news>
      <news:publication>
        <news:name>Hacky JS</news:name>
        <news:language>en</news:language>
      </news:publication>
      <news:publication_date>2026-10-30T00:00:00.000Z</news:publication_date>
      <news:title>Auditing the npm Trust Chain After ChainDrop: Tokens, OIDC, and Postinstall</news:title>
      <news:keywords>npm, supply-chain-security, provenance, oidc, ci-cd</news:keywords>
    </news:news>
  </url>
  <url>
    <loc>https://hackyjs.com/posts/auditing-reproducibility-in-apex-35b-an-agent-built-qwen36-model</loc>
    <news:news>
      <news:publication>
        <news:name>Hacky JS</news:name>
        <news:language>en</news:language>
      </news:publication>
      <news:publication_date>2026-10-29T00:00:00.000Z</news:publication_date>
      <news:title>Auditing Reproducibility in Apex-35B, an Agent-Built Qwen3.6 Model</news:title>
      <news:keywords>ai-agents, reproducibility, llm-training, model-evaluation, ml-engineering</news:keywords>
    </news:news>
  </url>
  <url>
    <loc>https://hackyjs.com/posts/verifying-wordpress-714-core-and-plugin-updates-against-the-unauthenticated-rce</loc>
    <news:news>
      <news:publication>
        <news:name>Hacky JS</news:name>
        <news:language>en</news:language>
      </news:publication>
      <news:publication_date>2026-10-29T00:00:00.000Z</news:publication_date>
      <news:title>Verifying WordPress 7.1.4 Core and Plugin Updates Against the Unauthenticated RCE</news:title>
      <news:keywords>wordpress, security, remote-code-execution, patch-management, cve</news:keywords>
    </news:news>
  </url>
  <url>
    <loc>https://hackyjs.com/posts/detecting-php2shell-telemetry-and-choke-points-from-web-shell-to-root</loc>
    <news:news>
      <news:publication>
        <news:name>Hacky JS</news:name>
        <news:language>en</news:language>
      </news:publication>
      <news:publication_date>2026-10-29T00:00:00.000Z</news:publication_date>
      <news:title>Detecting PHP2Shell: Telemetry and Choke Points From Web Shell to Root</news:title>
      <news:keywords>security, php, linux, incident-response, detection-engineering</news:keywords>
    </news:news>
  </url>
  <url>
    <loc>https://hackyjs.com/posts/autopsying-anthropics-40-cpu-win-which-levers-actually-moved-in-the-claude-assisted-rust-port</loc>
    <news:news>
      <news:publication>
        <news:name>Hacky JS</news:name>
        <news:language>en</news:language>
      </news:publication>
      <news:publication_date>2026-10-29T00:00:00.000Z</news:publication_date>
      <news:title>Autopsying Anthropic&apos;s 40% CPU Win: Which Levers Actually Moved in the Claude-Assisted Rust Port</news:title>
      <news:keywords>rust, performance, ai-assisted-development, benchmarking, concurrency</news:keywords>
    </news:news>
  </url>
</urlset>
