<?xml version="1.0" encoding="UTF-8"?>
<urlset xmlns="http://www.sitemaps.org/schemas/sitemap/0.9" xmlns:news="http://www.google.com/schemas/sitemap-news/0.9">
  <url>
    <loc>https://hackyjs.com/posts/inside-the-litellm-11070-pypi-compromise-infostealer-ci-secrets-and-where-verification-failed</loc>
    <news:news>
      <news:publication>
        <news:name>Hacky JS</news:name>
        <news:language>en</news:language>
      </news:publication>
      <news:publication_date>2026-10-22T00:00:00.000Z</news:publication_date>
      <news:title>Inside the LiteLLM 1.107.0 PyPI Compromise: Infostealer, CI Secrets, and Where Verification Failed</news:title>
      <news:keywords>supply-chain, pypi, security, python, ci-cd</news:keywords>
    </news:news>
  </url>
  <url>
    <loc>https://hackyjs.com/posts/nodejs-brotli-rce-what-to-check-in-your-runtime-lockfile-and-pipeline</loc>
    <news:news>
      <news:publication>
        <news:name>Hacky JS</news:name>
        <news:language>en</news:language>
      </news:publication>
      <news:publication_date>2026-10-22T00:00:00.000Z</news:publication_date>
      <news:title>Node.js Brotli RCE: What to Check in Your Runtime, Lockfile, and Pipeline</news:title>
      <news:keywords>nodejs, security, brotli, rce, devops</news:keywords>
    </news:news>
  </url>
  <url>
    <loc>https://hackyjs.com/posts/testing-coding-agents-for-monitor-tampering-with-a-javascript-red-team-harness</loc>
    <news:news>
      <news:publication>
        <news:name>Hacky JS</news:name>
        <news:language>en</news:language>
      </news:publication>
      <news:publication_date>2026-10-22T00:00:00.000Z</news:publication_date>
      <news:title>Testing Coding Agents for Monitor Tampering With a JavaScript Red-Team Harness</news:title>
      <news:keywords>javascript, ai-agents, red-teaming, security, testing</news:keywords>
    </news:news>
  </url>
  <url>
    <loc>https://hackyjs.com/posts/when-google-cloud-fails-card-authorization-needs-a-degraded-mode-contract</loc>
    <news:news>
      <news:publication>
        <news:name>Hacky JS</news:name>
        <news:language>en</news:language>
      </news:publication>
      <news:publication_date>2026-10-22T00:00:00.000Z</news:publication_date>
      <news:title>When Google Cloud Fails, Card Authorization Needs a Degraded-Mode Contract</news:title>
      <news:keywords>cloud-resilience, fintech, card-payments, degraded-mode</news:keywords>
    </news:news>
  </url>
</urlset>
