<?xml version="1.0" encoding="UTF-8"?>
<urlset xmlns="http://www.sitemaps.org/schemas/sitemap/0.9" xmlns:news="http://www.google.com/schemas/sitemap-news/0.9">
  <url>
    <loc>https://hackyjs.com/posts/instrumenting-agent-loops-for-cost-per-successful-task</loc>
    <news:news>
      <news:publication>
        <news:name>Hacky JS</news:name>
        <news:language>en</news:language>
      </news:publication>
      <news:publication_date>2026-11-09T00:00:00.000Z</news:publication_date>
      <news:title>Instrumenting Agent Loops for Cost per Successful Task</news:title>
      <news:keywords>agentic-ai, inference-cost, token-economics, observability, llmops</news:keywords>
    </news:news>
  </url>
  <url>
    <loc>https://hackyjs.com/posts/tracing-the-etherspherebee-js-1330-compromise-into-downstream-builds</loc>
    <news:news>
      <news:publication>
        <news:name>Hacky JS</news:name>
        <news:language>en</news:language>
      </news:publication>
      <news:publication_date>2026-11-09T00:00:00.000Z</news:publication_date>
      <news:title>Tracing the @ethersphere/bee-js 13.3.0 Compromise Into Downstream Builds</news:title>
      <news:keywords>npm, supply-chain-security, javascript, bee-js, dependency-management</news:keywords>
    </news:news>
  </url>
  <url>
    <loc>https://hackyjs.com/posts/auditing-a-shared-cpanel-estate-for-cve-2026-41940-exposure-windows</loc>
    <news:news>
      <news:publication>
        <news:name>Hacky JS</news:name>
        <news:language>en</news:language>
      </news:publication>
      <news:publication_date>2026-11-09T00:00:00.000Z</news:publication_date>
      <news:title>Auditing a Shared cPanel Estate for CVE-2026-41940 Exposure Windows</news:title>
      <news:keywords>cpanel, cve-2026-41940, vulnerability-management, hosting-security, exposure-auditing</news:keywords>
    </news:news>
  </url>
  <url>
    <loc>https://hackyjs.com/posts/server-actions-and-flight-endpoints-auditing-rsc-trust-boundaries-after-the-authless-rce-report</loc>
    <news:news>
      <news:publication>
        <news:name>Hacky JS</news:name>
        <news:language>en</news:language>
      </news:publication>
      <news:publication_date>2026-11-09T00:00:00.000Z</news:publication_date>
      <news:title>Server Actions and Flight Endpoints: Auditing RSC Trust Boundaries After the Authless RCE Report</news:title>
      <news:keywords>react-server-components, server-actions, security, javascript, nextjs</news:keywords>
    </news:news>
  </url>
  <url>
    <loc>https://hackyjs.com/posts/testing-a-multi-model-router-fallback-chains-quality-cliff-detection-and-per-request-cost-telemetry</loc>
    <news:news>
      <news:publication>
        <news:name>Hacky JS</news:name>
        <news:language>en</news:language>
      </news:publication>
      <news:publication_date>2026-11-08T00:00:00.000Z</news:publication_date>
      <news:title>Testing a Multi-Model Router: Fallback Chains, Quality-Cliff Detection, and Per-Request Cost Telemetry</news:title>
      <news:keywords>model-routing, llm-inference, fallback-chains, observability, cost-optimization</news:keywords>
    </news:news>
  </url>
  <url>
    <loc>https://hackyjs.com/posts/16k-per-node-what-per-gpu-software-licensing-adds-to-a-self-hosted-ai-bill</loc>
    <news:news>
      <news:publication>
        <news:name>Hacky JS</news:name>
        <news:language>en</news:language>
      </news:publication>
      <news:publication_date>2026-11-08T00:00:00.000Z</news:publication_date>
      <news:title>$16K per Node: What Per-GPU Software Licensing Adds to a Self-Hosted AI Bill</news:title>
      <news:keywords>nvidia, gpu-licensing, ai-infrastructure, cost-analysis, self-hosted-ai</news:keywords>
    </news:news>
  </url>
  <url>
    <loc>https://hackyjs.com/posts/dissecting-a-fake-security-scanner-repo-postinstall-hooks-obfuscated-loaders-and-exfil-endpoints</loc>
    <news:news>
      <news:publication>
        <news:name>Hacky JS</news:name>
        <news:language>en</news:language>
      </news:publication>
      <news:publication_date>2026-11-08T00:00:00.000Z</news:publication_date>
      <news:title>Dissecting a Fake Security Scanner Repo: postinstall Hooks, Obfuscated Loaders, and Exfil Endpoints</news:title>
      <news:keywords>supply-chain-security, malware-analysis, npm, github, ci-security</news:keywords>
    </news:news>
  </url>
  <url>
    <loc>https://hackyjs.com/posts/where-buns-3x-speedup-disappears-a-reproducible-benchmark-harness-for-nodejs-workloads</loc>
    <news:news>
      <news:publication>
        <news:name>Hacky JS</news:name>
        <news:language>en</news:language>
      </news:publication>
      <news:publication_date>2026-11-08T00:00:00.000Z</news:publication_date>
      <news:title>Where Bun&apos;s 3x Speedup Disappears: A Reproducible Benchmark Harness for Node.js Workloads</news:title>
      <news:keywords>bun, nodejs, benchmarking, performance, javascript</news:keywords>
    </news:news>
  </url>
</urlset>
