<?xml version="1.0" encoding="UTF-8"?>
<urlset xmlns="http://www.sitemaps.org/schemas/sitemap/0.9" xmlns:news="http://www.google.com/schemas/sitemap-news/0.9">
  <url>
    <loc>https://hackyjs.com/posts/chrome-149-patches-critical-code-execution-a-developers-post-update-security-checklist</loc>
    <news:news>
      <news:publication>
        <news:name>Hacky JS</news:name>
        <news:language>en</news:language>
      </news:publication>
      <news:publication_date>2026-06-25T00:00:00.000Z</news:publication_date>
      <news:title>Chrome 149 Patches Critical Code Execution: A Developer&apos;s Post-Update Security Checklist</news:title>
      <news:keywords>chrome, security-update, code-execution, browser-security</news:keywords>
    </news:news>
  </url>
  <url>
    <loc>https://hackyjs.com/posts/openclaws-skill-injection-fail-a-developers-guide-to-securing-ai-agent-dependencies</loc>
    <news:news>
      <news:publication>
        <news:name>Hacky JS</news:name>
        <news:language>en</news:language>
      </news:publication>
      <news:publication_date>2026-06-25T00:00:00.000Z</news:publication_date>
      <news:title>OpenClaw’s Skill Injection Fail: A Developer’s Guide to Securing AI Agent Dependencies</news:title>
      <news:keywords>ai-security, supply-chain, cybersecurity, agentic-ai</news:keywords>
    </news:news>
  </url>
  <url>
    <loc>https://hackyjs.com/posts/using-copilot-to-reverse-engineer-obfuscated-malware-loaders-a-practical-defense-walkthrough</loc>
    <news:news>
      <news:publication>
        <news:name>Hacky JS</news:name>
        <news:language>en</news:language>
      </news:publication>
      <news:publication_date>2026-06-25T00:00:00.000Z</news:publication_date>
      <news:title>Using Copilot to Reverse-Engineer Obfuscated Malware Loaders: A Practical Defense Walkthrough</news:title>
      <news:keywords>cybersecurity, malware-analysis, copilot, reverse-engineering</news:keywords>
    </news:news>
  </url>
  <url>
    <loc>https://hackyjs.com/posts/auditing-the-tanstack-supply-chain-compromise-postinstall-scripts-that-steal-github-tokens</loc>
    <news:news>
      <news:publication>
        <news:name>Hacky JS</news:name>
        <news:language>en</news:language>
      </news:publication>
      <news:publication_date>2026-06-24T00:00:00.000Z</news:publication_date>
      <news:title>Auditing the TanStack Supply Chain Compromise: Postinstall Scripts That Steal GitHub Tokens</news:title>
      <news:keywords>supply-chain-security, npm, github, postinstall</news:keywords>
    </news:news>
  </url>
  <url>
    <loc>https://hackyjs.com/posts/hardening-your-libssh2-integration-against-remote-code-execution</loc>
    <news:news>
      <news:publication>
        <news:name>Hacky JS</news:name>
        <news:language>en</news:language>
      </news:publication>
      <news:publication_date>2026-06-24T00:00:00.000Z</news:publication_date>
      <news:title>Hardening Your libssh2 Integration Against Remote Code Execution</news:title>
      <news:keywords>libssh2, ssh, rce, vulnerability, application-security</news:keywords>
    </news:news>
  </url>
  <url>
    <loc>https://hackyjs.com/posts/post-patch-webshell-persistence-detection-lessons-from-cisco-cve-2026-20230-for-nodejs-apps</loc>
    <news:news>
      <news:publication>
        <news:name>Hacky JS</news:name>
        <news:language>en</news:language>
      </news:publication>
      <news:publication_date>2026-06-24T00:00:00.000Z</news:publication_date>
      <news:title>Post-Patch Webshell Persistence: Detection Lessons from Cisco CVE-2026-20230 for Node.js Apps</news:title>
      <news:keywords>cybersecurity, nodejs, webshell, cve-2026-20230, threat-detection</news:keywords>
    </news:news>
  </url>
  <url>
    <loc>https://hackyjs.com/posts/rate-limiting-circuit-breakers-and-queue-backpressure-hardening-nodejs-against-ddos</loc>
    <news:news>
      <news:publication>
        <news:name>Hacky JS</news:name>
        <news:language>en</news:language>
      </news:publication>
      <news:publication_date>2026-06-24T00:00:00.000Z</news:publication_date>
      <news:title>Rate Limiting, Circuit Breakers, and Queue Backpressure: Hardening Node.js Against DDoS</news:title>
      <news:keywords>nodejs, ddos, rate-limiting, circuit-breakers, backpressure</news:keywords>
    </news:news>
  </url>
  <url>
    <loc>https://hackyjs.com/posts/securing-spfx-apps-when-the-sharepoint-server-is-the-weak-link</loc>
    <news:news>
      <news:publication>
        <news:name>Hacky JS</news:name>
        <news:language>en</news:language>
      </news:publication>
      <news:publication_date>2026-06-24T00:00:00.000Z</news:publication_date>
      <news:title>Securing SPFx Apps When the SharePoint Server Is the Weak Link</news:title>
      <news:keywords>sharepoint, spfx, cybersecurity, patch-management, enterprise-security</news:keywords>
    </news:news>
  </url>
  <url>
    <loc>https://hackyjs.com/posts/when-static-analysis-fails-instrumenting-the-browser-to-spot-token-theft</loc>
    <news:news>
      <news:publication>
        <news:name>Hacky JS</news:name>
        <news:language>en</news:language>
      </news:publication>
      <news:publication_date>2026-06-24T00:00:00.000Z</news:publication_date>
      <news:title>When Static Analysis Fails: Instrumenting the Browser to Spot Token Theft</news:title>
      <news:keywords>cybersecurity, browser-security, static-analysis, token-theft</news:keywords>
    </news:news>
  </url>
</urlset>
