<?xml version="1.0" encoding="UTF-8"?>
<urlset xmlns="http://www.sitemaps.org/schemas/sitemap/0.9" xmlns:news="http://www.google.com/schemas/sitemap-news/0.9">
  <url>
    <loc>https://hackyjs.com/posts/auditing-npm-trust-paths-how-maintainer-reputation-and-commit-signing-fail-to-stop-dependency-takeovers</loc>
    <news:news>
      <news:publication>
        <news:name>Hacky JS</news:name>
        <news:language>en</news:language>
      </news:publication>
      <news:publication_date>2026-07-19T00:00:00.000Z</news:publication_date>
      <news:title>Auditing npm Trust Paths: How Maintainer Reputation and Commit Signing Fail to Stop Dependency Takeovers</news:title>
      <news:keywords>npm, supply-chain-security, dependency-takeover, commit-signing</news:keywords>
    </news:news>
  </url>
  <url>
    <loc>https://hackyjs.com/posts/it-support-as-a-document-theft-path-ey-breach-analysis-and-developer-defenses</loc>
    <news:news>
      <news:publication>
        <news:name>Hacky JS</news:name>
        <news:language>en</news:language>
      </news:publication>
      <news:publication_date>2026-07-19T00:00:00.000Z</news:publication_date>
      <news:title>IT Support as a Document-Theft Path: EY Breach Analysis and Developer Defenses</news:title>
      <news:keywords>cybersecurity, data-breach, it-support, access-control, developer-security</news:keywords>
    </news:news>
  </url>
  <url>
    <loc>https://hackyjs.com/posts/the-otics-security-failures-behind-the-fairlife-ransomware-shutdown</loc>
    <news:news>
      <news:publication>
        <news:name>Hacky JS</news:name>
        <news:language>en</news:language>
      </news:publication>
      <news:publication_date>2026-07-19T00:00:00.000Z</news:publication_date>
      <news:title>The OT/ICS Security Failures Behind the Fairlife Ransomware Shutdown</news:title>
      <news:keywords>ot-security, ics, ransomware, manufacturing, fairlife</news:keywords>
    </news:news>
  </url>
</urlset>
