<?xml version="1.0" encoding="UTF-8"?>
<urlset xmlns="http://www.sitemaps.org/schemas/sitemap/0.9" xmlns:news="http://www.google.com/schemas/sitemap-news/0.9">
  <url>
    <loc>https://hackyjs.com/posts/how-north-korea-backdoored-144-ai-npm-packages-in-88-minutesand-what-your-dependency-audit-is-missing</loc>
    <news:news>
      <news:publication>
        <news:name>Hacky JS</news:name>
        <news:language>en</news:language>
      </news:publication>
      <news:publication_date>2026-06-21T00:00:00.000Z</news:publication_date>
      <news:title>How North Korea Backdoored 144 AI npm Packages in 88 Minutes—And What Your Dependency Audit Is Missing</news:title>
      <news:keywords>npm, supply-chain-security, cybersecurity, ai-security</news:keywords>
    </news:news>
  </url>
  <url>
    <loc>https://hackyjs.com/posts/real-time-qr-code-phishing-detection-with-javascript-and-the-safe-browsing-api</loc>
    <news:news>
      <news:publication>
        <news:name>Hacky JS</news:name>
        <news:language>en</news:language>
      </news:publication>
      <news:publication_date>2026-06-21T00:00:00.000Z</news:publication_date>
      <news:title>Real-Time QR Code Phishing Detection with JavaScript and the Safe Browsing API</news:title>
      <news:keywords>javascript, qr-code, phishing, safe-browsing-api</news:keywords>
    </news:news>
  </url>
  <url>
    <loc>https://hackyjs.com/posts/when-integrations-become-an-attack-path-hardening-salesforce-oauth-after-the-klue-incident</loc>
    <news:news>
      <news:publication>
        <news:name>Hacky JS</news:name>
        <news:language>en</news:language>
      </news:publication>
      <news:publication_date>2026-06-21T00:00:00.000Z</news:publication_date>
      <news:title>When Integrations Become an Attack Path: Hardening Salesforce OAuth After the Klue Incident</news:title>
      <news:keywords>salesforce, oauth-security, saas-security, incident-response</news:keywords>
    </news:news>
  </url>
</urlset>
