https://hackyjs.com/posts/cost-per-useful-agent-task-why-cached-tokens-break-naive-inference-pricing-math Hacky JS en 2026-09-23T00:00:00.000Z Cost per Useful Agent Task: Why Cached Tokens Break Naive Inference Pricing Math prompt-caching, inference-cost, llm-agents, cost-optimization https://hackyjs.com/posts/how-ghappier-turned-npm-trusted-publishing-into-a-package-poisoning-pipeline Hacky JS en 2026-09-23T00:00:00.000Z How GHAPPIER Turned npm Trusted Publishing Into a Package Poisoning Pipeline supply-chain, npm, github-actions, ci-cd, malware https://hackyjs.com/posts/verifying-changesets-v3s-88-install-size-claim-in-a-real-ci-pipeline Hacky JS en 2026-09-23T00:00:00.000Z Verifying Changesets v3's 88% Install-Size Claim in a Real CI Pipeline changesets, esm, monorepo, npm, ci-cd https://hackyjs.com/posts/what-breaks-when-you-port-fastapi-to-pyodide-on-cloudflare-workers Hacky JS en 2026-09-23T00:00:00.000Z What Breaks When You Port FastAPI to Pyodide on Cloudflare Workers fastapi, pyodide, cloudflare-workers, python, serverless https://hackyjs.com/posts/anatomy-of-the-meta-muse-0-day-how-prompt-injection-becomes-a-hijacked-tool-call Hacky JS en 2026-09-22T00:00:00.000Z Anatomy of the Meta Muse 0-Day: How Prompt Injection Becomes a Hijacked Tool Call ai-agents, security, prompt-injection, tool-calling, meta-muse https://hackyjs.com/posts/auditing-ai-agent-tool-execution-on-macos-after-the-meta-muse-zero-day Hacky JS en 2026-09-22T00:00:00.000Z Auditing AI Agent Tool Execution on macOS After the Meta Muse Zero-Day ai-agent-security, macos, zero-day, sandboxing, malware-injection https://hackyjs.com/posts/auditing-heif-decoding-in-server-side-javascript-after-the-heif-heist Hacky JS en 2026-09-22T00:00:00.000Z Auditing HEIF Decoding in Server-Side JavaScript After the HEIF Heist heif, image-parsing, rce, nodejs, security https://hackyjs.com/posts/building-a-cost-per-task-ledger-for-agent-pipelines-on-gpt-6-opus-55-and-grok-47 Hacky JS en 2026-09-22T00:00:00.000Z Building a Cost-Per-Task Ledger for Agent Pipelines on GPT-6, Opus 5.5, and Grok 4.7 llm-costs, agent-pipelines, inference-economics, prompt-caching, api-pricing https://hackyjs.com/posts/lifecycle-script-diffing-and-provenance-checks-hardening-npm-releases-after-the-65-repo-breach Hacky JS en 2026-09-22T00:00:00.000Z Lifecycle-Script Diffing and Provenance Checks: Hardening npm Releases After the 65-Repo Breach npm, supply-chain-security, ci-cd, provenance, github-actions https://hackyjs.com/posts/porting-a-real-python-backend-to-cloudflare-workers-what-pyodidewasm-actually-breaks Hacky JS en 2026-09-22T00:00:00.000Z Porting a Real Python Backend to Cloudflare Workers: What Pyodide/WASM Actually Breaks cloudflare-workers, python, pyodide, wasm, edge-computing