<?xml version="1.0" encoding="UTF-8"?>
<urlset xmlns="http://www.sitemaps.org/schemas/sitemap/0.9" xmlns:news="http://www.google.com/schemas/sitemap-news/0.9">
  <url>
    <loc>https://hackyjs.com/posts/from-trace-spans-to-chargeback-attributing-inference-costs-per-agent</loc>
    <news:news>
      <news:publication>
        <news:name>Hacky JS</news:name>
        <news:language>en</news:language>
      </news:publication>
      <news:publication_date>2026-10-13T00:00:00.000Z</news:publication_date>
      <news:title>From Trace Spans to Chargeback: Attributing Inference Costs per Agent</news:title>
      <news:keywords>ai-agents, observability, llm-costs, opentelemetry, finops</news:keywords>
    </news:news>
  </url>
  <url>
    <loc>https://hackyjs.com/posts/gitlabs-two-99-regex-rce-flaws-a-cicd-maintainers-patch-and-verify-playbook</loc>
    <news:news>
      <news:publication>
        <news:name>Hacky JS</news:name>
        <news:language>en</news:language>
      </news:publication>
      <news:publication_date>2026-10-13T00:00:00.000Z</news:publication_date>
      <news:title>GitLab&apos;s Two 9.9 Regex RCE Flaws: A CI/CD Maintainer&apos;s Patch and Verify Playbook</news:title>
      <news:keywords>gitlab, ci-cd, security, regex, rce</news:keywords>
    </news:news>
  </url>
  <url>
    <loc>https://hackyjs.com/posts/testing-react-193s-browser-against-useeffect-and-dynamic-imports</loc>
    <news:news>
      <news:publication>
        <news:name>Hacky JS</news:name>
        <news:language>en</news:language>
      </news:publication>
      <news:publication_date>2026-10-13T00:00:00.000Z</news:publication_date>
      <news:title>Testing React 19.3&apos;s browser() Against useEffect and Dynamic Imports</news:title>
      <news:keywords>react, react-19, client-only-rendering, hydration, ssr</news:keywords>
    </news:news>
  </url>
  <url>
    <loc>https://hackyjs.com/posts/why-waf-rules-alone-miss-the-bricksforge-wordpress-plugin-rce</loc>
    <news:news>
      <news:publication>
        <news:name>Hacky JS</news:name>
        <news:language>en</news:language>
      </news:publication>
      <news:publication_date>2026-10-13T00:00:00.000Z</news:publication_date>
      <news:title>Why WAF Rules Alone Miss the Bricksforge WordPress Plugin RCE</news:title>
      <news:keywords>wordpress-security, remote-code-execution, waf-bypass, vulnerability-exploitation, incident-response</news:keywords>
    </news:news>
  </url>
  <url>
    <loc>https://hackyjs.com/posts/benchmarking-polars-vs-pandas-on-groupby-heavy-analytics-workloads</loc>
    <news:news>
      <news:publication>
        <news:name>Hacky JS</news:name>
        <news:language>en</news:language>
      </news:publication>
      <news:publication_date>2026-10-12T00:00:00.000Z</news:publication_date>
      <news:title>Benchmarking Polars vs pandas on Groupby-Heavy Analytics Workloads</news:title>
      <news:keywords>polars, pandas, python, dataframes, performance</news:keywords>
    </news:news>
  </url>
  <url>
    <loc>https://hackyjs.com/posts/hunting-ransomware-initial-access-in-palo-alto-globalprotect-logs</loc>
    <news:news>
      <news:publication>
        <news:name>Hacky JS</news:name>
        <news:language>en</news:language>
      </news:publication>
      <news:publication_date>2026-10-12T00:00:00.000Z</news:publication_date>
      <news:title>Hunting Ransomware Initial Access in Palo Alto GlobalProtect Logs</news:title>
      <news:keywords>palo-alto, globalprotect, ransomware, vpn-security, incident-response</news:keywords>
    </news:news>
  </url>
  <url>
    <loc>https://hackyjs.com/posts/intercepting-egress-in-nodetypescript-agent-evals-fetch-undici-dns-spawn-and-the-audit-log-that-fails-the-run</loc>
    <news:news>
      <news:publication>
        <news:name>Hacky JS</news:name>
        <news:language>en</news:language>
      </news:publication>
      <news:publication_date>2026-10-12T00:00:00.000Z</news:publication_date>
      <news:title>Intercepting Egress in Node/TypeScript Agent Evals: fetch, undici, DNS, spawn, and the Audit Log That Fails the Run</news:title>
      <news:keywords>node, typescript, ai-agents, sandboxing, testing</news:keywords>
    </news:news>
  </url>
  <url>
    <loc>https://hackyjs.com/posts/shipping-ai-agents-under-the-eu-ai-act-a-developer-checklist-for-risk-tiers-and-audit-trails</loc>
    <news:news>
      <news:publication>
        <news:name>Hacky JS</news:name>
        <news:language>en</news:language>
      </news:publication>
      <news:publication_date>2026-10-12T00:00:00.000Z</news:publication_date>
      <news:title>Shipping AI Agents Under the EU AI Act: A Developer Checklist for Risk Tiers and Audit Trails</news:title>
      <news:keywords>eu-ai-act, ai-agents, compliance, audit-logging, mlops</news:keywords>
    </news:news>
  </url>
</urlset>
