<?xml version="1.0" encoding="UTF-8"?>
<urlset xmlns="http://www.sitemaps.org/schemas/sitemap/0.9" xmlns:news="http://www.google.com/schemas/sitemap-news/0.9">
  <url>
    <loc>https://hackyjs.com/posts/comparing-pre-auth-data-plane-and-management-plane-rce-in-f5-check-point-and-velocloud-appliances</loc>
    <news:news>
      <news:publication>
        <news:name>Hacky JS</news:name>
        <news:language>en</news:language>
      </news:publication>
      <news:publication_date>2026-09-24T00:00:00.000Z</news:publication_date>
      <news:title>Comparing Pre-Auth Data-Plane and Management-Plane RCE in F5, Check Point, and VeloCloud Appliances</news:title>
      <news:keywords>f5-big-ip, check-point, velocloud, zero-day, edge-appliance-security</news:keywords>
    </news:news>
  </url>
  <url>
    <loc>https://hackyjs.com/posts/cost-per-token-is-not-cost-per-job-benchmarking-four-model-families-with-a-task-level-harness</loc>
    <news:news>
      <news:publication>
        <news:name>Hacky JS</news:name>
        <news:language>en</news:language>
      </news:publication>
      <news:publication_date>2026-09-24T00:00:00.000Z</news:publication_date>
      <news:title>Cost Per Token Is Not Cost Per Job: Benchmarking Four Model Families with a Task-Level Harness</news:title>
      <news:keywords>ai, llm-costs, benchmarking, inference, developer-tools</news:keywords>
    </news:news>
  </url>
  <url>
    <loc>https://hackyjs.com/posts/updating-actionyml-from-runsusing-node20-to-node24-without-breaking-your-action</loc>
    <news:news>
      <news:publication>
        <news:name>Hacky JS</news:name>
        <news:language>en</news:language>
      </news:publication>
      <news:publication_date>2026-09-24T00:00:00.000Z</news:publication_date>
      <news:title>Updating action.yml from runs.using: node20 to node24 Without Breaking Your Action</news:title>
      <news:keywords>github-actions, nodejs, ci-cd, javascript, migration</news:keywords>
    </news:news>
  </url>
  <url>
    <loc>https://hackyjs.com/posts/why-ai-capacity-spending-at-alibaba-amazon-and-oracle-will-reprice-your-cloud-by-2027</loc>
    <news:news>
      <news:publication>
        <news:name>Hacky JS</news:name>
        <news:language>en</news:language>
      </news:publication>
      <news:publication_date>2026-09-24T00:00:00.000Z</news:publication_date>
      <news:title>Why AI Capacity Spending at Alibaba, Amazon, and Oracle Will Reprice Your Cloud by 2027</news:title>
      <news:keywords>cloud-computing, ai-infrastructure, hyperscalers, data-centers, cloud-pricing</news:keywords>
    </news:news>
  </url>
  <url>
    <loc>https://hackyjs.com/posts/cost-per-useful-agent-task-why-cached-tokens-break-naive-inference-pricing-math</loc>
    <news:news>
      <news:publication>
        <news:name>Hacky JS</news:name>
        <news:language>en</news:language>
      </news:publication>
      <news:publication_date>2026-09-23T00:00:00.000Z</news:publication_date>
      <news:title>Cost per Useful Agent Task: Why Cached Tokens Break Naive Inference Pricing Math</news:title>
      <news:keywords>prompt-caching, inference-cost, llm-agents, cost-optimization</news:keywords>
    </news:news>
  </url>
  <url>
    <loc>https://hackyjs.com/posts/how-ghappier-turned-npm-trusted-publishing-into-a-package-poisoning-pipeline</loc>
    <news:news>
      <news:publication>
        <news:name>Hacky JS</news:name>
        <news:language>en</news:language>
      </news:publication>
      <news:publication_date>2026-09-23T00:00:00.000Z</news:publication_date>
      <news:title>How GHAPPIER Turned npm Trusted Publishing Into a Package Poisoning Pipeline</news:title>
      <news:keywords>supply-chain, npm, github-actions, ci-cd, malware</news:keywords>
    </news:news>
  </url>
  <url>
    <loc>https://hackyjs.com/posts/verifying-changesets-v3s-88-install-size-claim-in-a-real-ci-pipeline</loc>
    <news:news>
      <news:publication>
        <news:name>Hacky JS</news:name>
        <news:language>en</news:language>
      </news:publication>
      <news:publication_date>2026-09-23T00:00:00.000Z</news:publication_date>
      <news:title>Verifying Changesets v3&apos;s 88% Install-Size Claim in a Real CI Pipeline</news:title>
      <news:keywords>changesets, esm, monorepo, npm, ci-cd</news:keywords>
    </news:news>
  </url>
  <url>
    <loc>https://hackyjs.com/posts/what-breaks-when-you-port-fastapi-to-pyodide-on-cloudflare-workers</loc>
    <news:news>
      <news:publication>
        <news:name>Hacky JS</news:name>
        <news:language>en</news:language>
      </news:publication>
      <news:publication_date>2026-09-23T00:00:00.000Z</news:publication_date>
      <news:title>What Breaks When You Port FastAPI to Pyodide on Cloudflare Workers</news:title>
      <news:keywords>fastapi, pyodide, cloudflare-workers, python, serverless</news:keywords>
    </news:news>
  </url>
</urlset>
