<?xml version="1.0" encoding="UTF-8"?>
<urlset xmlns="http://www.sitemaps.org/schemas/sitemap/0.9" xmlns:news="http://www.google.com/schemas/sitemap-news/0.9">
  <url>
    <loc>https://hackyjs.com/posts/anatomy-of-a-self-propagating-npm-and-pypi-worm-that-hijacked-agent-memory</loc>
    <news:news>
      <news:publication>
        <news:name>Hacky JS</news:name>
        <news:language>en</news:language>
      </news:publication>
      <news:publication_date>2026-09-26T00:00:00.000Z</news:publication_date>
      <news:title>Anatomy of a Self-Propagating npm and PyPI Worm That Hijacked Agent Memory</news:title>
      <news:keywords>npm, pypi, supply-chain-security, ai-agents, malware</news:keywords>
    </news:news>
  </url>
  <url>
    <loc>https://hackyjs.com/posts/measuring-tokens-per-task-in-javascript-agents-with-per-step-cost-tracing-and-budget-limits</loc>
    <news:news>
      <news:publication>
        <news:name>Hacky JS</news:name>
        <news:language>en</news:language>
      </news:publication>
      <news:publication_date>2026-09-26T00:00:00.000Z</news:publication_date>
      <news:title>Measuring Tokens-per-Task in JavaScript Agents with Per-Step Cost Tracing and Budget Limits</news:title>
      <news:keywords>javascript, ai-agents, token-economics, observability, cost-optimization</news:keywords>
    </news:news>
  </url>
  <url>
    <loc>https://hackyjs.com/posts/region-selection-is-now-a-compliance-decision-californias-data-center-package-and-virginia-eo-22</loc>
    <news:news>
      <news:publication>
        <news:name>Hacky JS</news:name>
        <news:language>en</news:language>
      </news:publication>
      <news:publication_date>2026-09-26T00:00:00.000Z</news:publication_date>
      <news:title>Region Selection Is Now a Compliance Decision: California&apos;s Data Center Package and Virginia EO 22</news:title>
      <news:keywords>data-centers, cloud-compliance, ai-infrastructure, regulation, region-selection</news:keywords>
    </news:news>
  </url>
  <url>
    <loc>https://hackyjs.com/posts/what-breaks-when-you-compile-typescript-to-a-native-binary-with-scriptc</loc>
    <news:news>
      <news:publication>
        <news:name>Hacky JS</news:name>
        <news:language>en</news:language>
      </news:publication>
      <news:publication_date>2026-09-26T00:00:00.000Z</news:publication_date>
      <news:title>What Breaks When You Compile TypeScript to a Native Binary with scriptc</news:title>
      <news:keywords>typescript, compilers, native-code, tooling, vercel</news:keywords>
    </news:news>
  </url>
  <url>
    <loc>https://hackyjs.com/posts/detecting-and-virtually-patching-wordpress-cve-2026-87902-with-a-nodejs-triage-script</loc>
    <news:news>
      <news:publication>
        <news:name>Hacky JS</news:name>
        <news:language>en</news:language>
      </news:publication>
      <news:publication_date>2026-09-25T00:00:00.000Z</news:publication_date>
      <news:title>Detecting and Virtually Patching WordPress CVE-2026-87902 with a Node.js Triage Script</news:title>
      <news:keywords>wordpress, security, nodejs, cve, incident-response</news:keywords>
    </news:news>
  </url>
  <url>
    <loc>https://hackyjs.com/posts/reproducing-the-zod-vs-valibot-vs-arktype-13x-bundle-size-claim-in-nextjs</loc>
    <news:news>
      <news:publication>
        <news:name>Hacky JS</news:name>
        <news:language>en</news:language>
      </news:publication>
      <news:publication_date>2026-09-25T00:00:00.000Z</news:publication_date>
      <news:title>Reproducing the Zod vs Valibot vs ArkType 13x Bundle-Size Claim in Next.js</news:title>
      <news:keywords>typescript, zod, valibot, arktype, nextjs</news:keywords>
    </news:news>
  </url>
  <url>
    <loc>https://hackyjs.com/posts/what-systemd-262s-static-pid-1-changes-for-boot-recovery-and-immutable-hosts</loc>
    <news:news>
      <news:publication>
        <news:name>Hacky JS</news:name>
        <news:language>en</news:language>
      </news:publication>
      <news:publication_date>2026-09-25T00:00:00.000Z</news:publication_date>
      <news:title>What systemd 262&apos;s Static PID 1 Changes for Boot, Recovery, and Immutable Hosts</news:title>
      <news:keywords>systemd, linux, boot-process, immutable-infrastructure, containers</news:keywords>
    </news:news>
  </url>
  <url>
    <loc>https://hackyjs.com/posts/where-thinking-token-savings-fail-to-become-gpu-savings-in-qwen38-27b</loc>
    <news:news>
      <news:publication>
        <news:name>Hacky JS</news:name>
        <news:language>en</news:language>
      </news:publication>
      <news:publication_date>2026-09-25T00:00:00.000Z</news:publication_date>
      <news:title>Where Thinking-Token Savings Fail to Become GPU Savings in Qwen3.8-27B</news:title>
      <news:keywords>qwen, llm-inference, gpu-optimization, reasoning-models, token-efficiency</news:keywords>
    </news:news>
  </url>
</urlset>
