<?xml version="1.0" encoding="UTF-8"?>
<urlset xmlns="http://www.sitemaps.org/schemas/sitemap/0.9">
  <url>
    <loc>https://hackyjs.com/</loc>
    <changefreq>daily</changefreq>
    <priority>1.0</priority>
  </url>
  <url>
    <loc>https://hackyjs.com/posts</loc>
    <changefreq>daily</changefreq>
    <priority>0.9</priority>
  </url>
  <url>
    <loc>https://hackyjs.com/videos</loc>
    <changefreq>weekly</changefreq>
    <priority>0.8</priority>
  </url>
  <url>
    <loc>https://hackyjs.com/contact</loc>
    <changefreq>monthly</changefreq>
    <priority>0.5</priority>
  </url>
  <url>
    <loc>https://hackyjs.com/posts/ai-security-tool-unearths-two-year-old-redis-flaw-that-allows-full-server-takeover</loc>
    <lastmod>2026-06-03T00:00:00.000Z</lastmod>
    <changefreq>weekly</changefreq>
    <priority>0.9</priority>
  </url>
  <url>
    <loc>https://hackyjs.com/posts/auditing-github-oauth-implementations-for-single-click-token-exposure</loc>
    <lastmod>2026-06-03T00:00:00.000Z</lastmod>
    <changefreq>weekly</changefreq>
    <priority>0.9</priority>
  </url>
  <url>
    <loc>https://hackyjs.com/posts/countering-ai-driven-attacks-with-exposure-management-developer-takeaways</loc>
    <lastmod>2026-06-03T00:00:00.000Z</lastmod>
    <changefreq>weekly</changefreq>
    <priority>0.9</priority>
  </url>
  <url>
    <loc>https://hackyjs.com/posts/dissecting-the-githubdev-vulnerability-that-leaks-oauth-tokens-in-one-click</loc>
    <lastmod>2026-06-03T00:00:00.000Z</lastmod>
    <changefreq>weekly</changefreq>
    <priority>0.9</priority>
  </url>
  <url>
    <loc>https://hackyjs.com/posts/hardening-windows-against-search-uri-ntlmv2-credential-theft</loc>
    <lastmod>2026-06-03T00:00:00.000Z</lastmod>
    <changefreq>weekly</changefreq>
    <priority>0.9</priority>
  </url>
  <url>
    <loc>https://hackyjs.com/posts/when-attackers-use-ai-to-evade-edr-hardening-build-agents-against-lateral-movement</loc>
    <lastmod>2026-06-03T00:00:00.000Z</lastmod>
    <changefreq>weekly</changefreq>
    <priority>0.9</priority>
  </url>
  <url>
    <loc>https://hackyjs.com/posts/defensive-lessons-from-the-android-exploit-chain-that-achieved-device-takeover</loc>
    <lastmod>2026-06-02T00:00:00.000Z</lastmod>
    <changefreq>weekly</changefreq>
    <priority>0.9</priority>
  </url>
  <url>
    <loc>https://hackyjs.com/posts/dissecting-the-red-hat-npm-supplychain-attack-from-malicious-package-to-credential-exposure</loc>
    <lastmod>2026-06-02T00:00:00.000Z</lastmod>
    <changefreq>weekly</changefreq>
    <priority>0.9</priority>
  </url>
  <url>
    <loc>https://hackyjs.com/posts/how-the-claude-code-github-actions-flaw-can-compromise-your-repo-and-what-to-change-in-your-workflows</loc>
    <lastmod>2026-06-02T00:00:00.000Z</lastmod>
    <changefreq>weekly</changefreq>
    <priority>0.9</priority>
  </url>
  <url>
    <loc>https://hackyjs.com/posts/june-2026s-actively-exploited-android-flaw-practical-remediation-for-developers</loc>
    <lastmod>2026-06-02T00:00:00.000Z</lastmod>
    <changefreq>weekly</changefreq>
    <priority>0.9</priority>
  </url>
  <url>
    <loc>https://hackyjs.com/posts/kernel-privilege-escalation-on-android-a-practical-detection-playbook</loc>
    <lastmod>2026-06-02T00:00:00.000Z</lastmod>
    <changefreq>weekly</changefreq>
    <priority>0.9</priority>
  </url>
  <url>
    <loc>https://hackyjs.com/posts/the-cve-2024-21182-weblogic-t3-exploit-from-kev-listing-to-patch-verification-for-java-teams</loc>
    <lastmod>2026-06-02T00:00:00.000Z</lastmod>
    <changefreq>weekly</changefreq>
    <priority>0.9</priority>
  </url>
  <url>
    <loc>https://hackyjs.com/posts/the-two-year-old-weblogic-flaw-cisa-is-flagging-cve-2023-21839-detection-and-defense</loc>
    <lastmod>2026-06-02T00:00:00.000Z</lastmod>
    <changefreq>weekly</changefreq>
    <priority>0.9</priority>
  </url>
  <url>
    <loc>https://hackyjs.com/posts/what-the-red-hat-redhat-cloud-services-incident-means-for-your-npm-supply-chain</loc>
    <lastmod>2026-06-02T00:00:00.000Z</lastmod>
    <changefreq>weekly</changefreq>
    <priority>0.9</priority>
  </url>
  <url>
    <loc>https://hackyjs.com/posts/auditing-kubernetes-for-critical-hostnetwork-and-docker-socket-misconfigurations</loc>
    <lastmod>2026-06-01T00:00:00.000Z</lastmod>
    <changefreq>weekly</changefreq>
    <priority>0.9</priority>
  </url>
  <url>
    <loc>https://hackyjs.com/posts/auditing-the-red-hat-npm-credential-stealer-a-practical-defense-playbook</loc>
    <lastmod>2026-06-01T00:00:00.000Z</lastmod>
    <changefreq>weekly</changefreq>
    <priority>0.9</priority>
  </url>
  <url>
    <loc>https://hackyjs.com/posts/auditing-your-oauth-client-for-consent-based-account-takeover</loc>
    <lastmod>2026-06-01T00:00:00.000Z</lastmod>
    <changefreq>weekly</changefreq>
    <priority>0.9</priority>
  </url>
  <url>
    <loc>https://hackyjs.com/posts/detecting-and-preventing-xenorat-persistence-tracing-the-sidecopy-finance-ministry-compromise</loc>
    <lastmod>2026-06-01T00:00:00.000Z</lastmod>
    <changefreq>weekly</changefreq>
    <priority>0.9</priority>
  </url>
  <url>
    <loc>https://hackyjs.com/posts/detecting-fake-service-status-pages-in-the-openai-outage-phishing-campaign</loc>
    <lastmod>2026-06-01T00:00:00.000Z</lastmod>
    <changefreq>weekly</changefreq>
    <priority>0.9</priority>
  </url>
  <url>
    <loc>https://hackyjs.com/posts/magento-cache-plugin-rce-understanding-the-attack-and-avoiding-common-patching-mistakes</loc>
    <lastmod>2026-06-01T00:00:00.000Z</lastmod>
    <changefreq>weekly</changefreq>
    <priority>0.9</priority>
  </url>
  <url>
    <loc>https://hackyjs.com/posts/auditing-cosmos-sdk-bridges-gravity-bridge-validator-key-compromise-deep-dive</loc>
    <lastmod>2026-05-31T00:00:00.000Z</lastmod>
    <changefreq>weekly</changefreq>
    <priority>0.9</priority>
  </url>
  <url>
    <loc>https://hackyjs.com/posts/auditing-indian-application-security-for-ai-generated-zero-day-exploits</loc>
    <lastmod>2026-05-31T00:00:00.000Z</lastmod>
    <changefreq>weekly</changefreq>
    <priority>0.9</priority>
  </url>
  <url>
    <loc>https://hackyjs.com/posts/auditing-live-financial-broadcasts-for-synthetic-voice-using-javascript-and-whisper</loc>
    <lastmod>2026-05-31T00:00:00.000Z</lastmod>
    <changefreq>weekly</changefreq>
    <priority>0.9</priority>
  </url>
  <url>
    <loc>https://hackyjs.com/posts/auditing-the-revenge-zero-day-windows-exploit-for-developer-defenses</loc>
    <lastmod>2026-05-31T00:00:00.000Z</lastmod>
    <changefreq>weekly</changefreq>
    <priority>0.9</priority>
  </url>
  <url>
    <loc>https://hackyjs.com/posts/building-an-ai-enhanced-response-framework-for-zero-day-attacks-in-african-fintech</loc>
    <lastmod>2026-05-31T00:00:00.000Z</lastmod>
    <changefreq>weekly</changefreq>
    <priority>0.9</priority>
  </url>
  <url>
    <loc>https://hackyjs.com/posts/dont-trust-the-cookie-cve-2026-0257-and-the-vpn-session-forgery-pattern</loc>
    <lastmod>2026-05-31T00:00:00.000Z</lastmod>
    <changefreq>weekly</changefreq>
    <priority>0.9</priority>
  </url>
  <url>
    <loc>https://hackyjs.com/posts/from-phishing-to-token-theft-how-attackers-move-past-identity-checks-in-the-cloud</loc>
    <lastmod>2026-05-31T00:00:00.000Z</lastmod>
    <changefreq>weekly</changefreq>
    <priority>0.9</priority>
  </url>
  <url>
    <loc>https://hackyjs.com/posts/testing-your-app-against-threats-like-claude-mythos-and-gpt-54-cyber</loc>
    <lastmod>2026-05-31T00:00:00.000Z</lastmod>
    <changefreq>weekly</changefreq>
    <priority>0.9</priority>
  </url>
  <url>
    <loc>https://hackyjs.com/posts/auditing-flowise-for-remote-code-execution-a-practical-developers-walkthrough</loc>
    <lastmod>2026-05-30T00:00:00.000Z</lastmod>
    <changefreq>weekly</changefreq>
    <priority>0.9</priority>
  </url>
  <url>
    <loc>https://hackyjs.com/posts/from-cve-2026-0257-to-hardened-defenses-auditing-pan-os-and-prisma-for-similar-bypasses</loc>
    <lastmod>2026-05-30T00:00:00.000Z</lastmod>
    <changefreq>weekly</changefreq>
    <priority>0.9</priority>
  </url>
  <url>
    <loc>https://hackyjs.com/posts/preventing-prompt-injection-in-nodejs-ai-agents-a-defense-playbook</loc>
    <lastmod>2026-05-30T00:00:00.000Z</lastmod>
    <changefreq>weekly</changefreq>
    <priority>0.9</priority>
  </url>
  <url>
    <loc>https://hackyjs.com/posts/spotting-the-globalprotect-auth-bypass-log-patterns-and-snort-rules-for-cve-2026-0257</loc>
    <lastmod>2026-05-30T00:00:00.000Z</lastmod>
    <changefreq>weekly</changefreq>
    <priority>0.9</priority>
  </url>
  <url>
    <loc>https://hackyjs.com/posts/testing-your-javascript-frontend-for-ai-generated-phishing-attacks</loc>
    <lastmod>2026-05-30T00:00:00.000Z</lastmod>
    <changefreq>weekly</changefreq>
    <priority>0.9</priority>
  </url>
  <url>
    <loc>https://hackyjs.com/posts/why-ai-code-gen-needs-authorization-audits-gitlab-duo-ai-flaws-as-a-case-study</loc>
    <lastmod>2026-05-30T00:00:00.000Z</lastmod>
    <changefreq>weekly</changefreq>
    <priority>0.9</priority>
  </url>
  <url>
    <loc>https://hackyjs.com/posts/following-the-jinx-0164-infection-chain-from-linkedin-message-to-persistent-macos-malware</loc>
    <lastmod>2026-05-29T00:00:00.000Z</lastmod>
    <changefreq>weekly</changefreq>
    <priority>0.9</priority>
  </url>
  <url>
    <loc>https://hackyjs.com/posts/hardening-npm-and-github-actions-with-cisas-supply-chain-security-checklist</loc>
    <lastmod>2026-05-29T00:00:00.000Z</lastmod>
    <changefreq>weekly</changefreq>
    <priority>0.9</priority>
  </url>
  <url>
    <loc>https://hackyjs.com/posts/marimo-cve-2026-39987-how-attackers-weaponized-an-llm-agent-after-the-exploit</loc>
    <lastmod>2026-05-29T00:00:00.000Z</lastmod>
    <changefreq>weekly</changefreq>
    <priority>0.9</priority>
  </url>
  <url>
    <loc>https://hackyjs.com/posts/mitigating-the-vs-code-remote-ssh-rce-configuration-changes-and-best-practices</loc>
    <lastmod>2026-05-29T00:00:00.000Z</lastmod>
    <changefreq>weekly</changefreq>
    <priority>0.9</priority>
  </url>
  <url>
    <loc>https://hackyjs.com/posts/npm-packages-impersonating-cloud-sdks-defense-for-javascript-developers</loc>
    <lastmod>2026-05-29T00:00:00.000Z</lastmod>
    <changefreq>weekly</changefreq>
    <priority>0.9</priority>
  </url>
  <url>
    <loc>https://hackyjs.com/posts/when-a-windows-zero-day-disclosure-leads-to-a-github-ban-defensive-steps-for-developers</loc>
    <lastmod>2026-05-29T00:00:00.000Z</lastmod>
    <changefreq>weekly</changefreq>
    <priority>0.9</priority>
  </url>
  <url>
    <loc>https://hackyjs.com/posts/how-to-audit-an-ai-note-taker-for-hipaas-data-processing-agreement-requirements</loc>
    <lastmod>2026-05-28T00:00:00.000Z</lastmod>
    <changefreq>weekly</changefreq>
    <priority>0.9</priority>
  </url>
  <url>
    <loc>https://hackyjs.com/posts/operationalizing-the-vaticans-ai-ethics-human-oversight-and-safety-by-design-in-code</loc>
    <lastmod>2026-05-28T00:00:00.000Z</lastmod>
    <changefreq>weekly</changefreq>
    <priority>0.9</priority>
  </url>
  <url>
    <loc>https://hackyjs.com/posts/production-ai-agents-need-real-sandboxing-not-just-api-keys-and-prompts</loc>
    <lastmod>2026-05-28T00:00:00.000Z</lastmod>
    <changefreq>weekly</changefreq>
    <priority>0.9</priority>
  </url>
  <url>
    <loc>https://hackyjs.com/posts/red-teaming-an-llm-looks-nothing-like-a-web-app-pentest</loc>
    <lastmod>2026-05-28T00:00:00.000Z</lastmod>
    <changefreq>weekly</changefreq>
    <priority>0.9</priority>
  </url>
  <url>
    <loc>https://hackyjs.com/posts/single-command-codebase-migrations-testing-claude-opus-48s-agent-orchestration-at-scale</loc>
    <lastmod>2026-05-28T00:00:00.000Z</lastmod>
    <changefreq>weekly</changefreq>
    <priority>0.9</priority>
  </url>
  <url>
    <loc>https://hackyjs.com/posts/auditing-conference-cfp-software-for-vote-manipulation-bugs</loc>
    <lastmod>2026-05-27T00:00:00.000Z</lastmod>
    <changefreq>weekly</changefreq>
    <priority>0.8</priority>
  </url>
  <url>
    <loc>https://hackyjs.com/posts/auditing-developer-tool-integrations-for-supply-chain-ransomware-a-post-incident-review</loc>
    <lastmod>2026-05-27T00:00:00.000Z</lastmod>
    <changefreq>weekly</changefreq>
    <priority>0.8</priority>
  </url>
  <url>
    <loc>https://hackyjs.com/posts/auditing-the-new-8b-local-llm-for-inference-leaks-and-extraction-surfaces</loc>
    <lastmod>2026-05-27T00:00:00.000Z</lastmod>
    <changefreq>weekly</changefreq>
    <priority>0.8</priority>
  </url>
  <url>
    <loc>https://hackyjs.com/posts/deepseek-made-v4-pros-discount-permanent-a-practical-look-at-what-cheap-1m-context-ai-unlocks-for-solo-builders</loc>
    <lastmod>2026-05-27T00:00:00.000Z</lastmod>
    <changefreq>weekly</changefreq>
    <priority>0.8</priority>
  </url>
  <url>
    <loc>https://hackyjs.com/posts/deepseek-v4-pro-price-at-75-off-forever</loc>
    <lastmod>2026-05-27T00:00:00.000Z</lastmod>
    <changefreq>weekly</changefreq>
    <priority>0.8</priority>
  </url>
  <url>
    <loc>https://hackyjs.com/posts/defending-against-glassworm-checks-you-can-run-on-npm-pypi-and-openvsx-dependencies</loc>
    <lastmod>2026-05-27T00:00:00.000Z</lastmod>
    <changefreq>weekly</changefreq>
    <priority>0.8</priority>
  </url>
  <url>
    <loc>https://hackyjs.com/posts/detecting-and-mitigating-nginx-cve-2026-42945-and-cve-2026-9256-under-active-attack</loc>
    <lastmod>2026-05-27T00:00:00.000Z</lastmod>
    <changefreq>weekly</changefreq>
    <priority>0.8</priority>
  </url>
  <url>
    <loc>https://hackyjs.com/posts/distillation-discount-how-deepseeks-75-price-cut-exploits-the-race-to-the-bottom-in-ai-apis</loc>
    <lastmod>2026-05-27T00:00:00.000Z</lastmod>
    <changefreq>weekly</changefreq>
    <priority>0.8</priority>
  </url>
  <url>
    <loc>https://hackyjs.com/posts/how-aggressive-ai-pricing-opens-supply-chain-attack-surfaces-in-developer-workflows</loc>
    <lastmod>2026-05-27T00:00:00.000Z</lastmod>
    <changefreq>weekly</changefreq>
    <priority>0.8</priority>
  </url>
  <url>
    <loc>https://hackyjs.com/posts/litespeed-cpanel-plugin-zero-day-from-exploitation-to-detection</loc>
    <lastmod>2026-05-27T00:00:00.000Z</lastmod>
    <changefreq>weekly</changefreq>
    <priority>0.8</priority>
  </url>
  <url>
    <loc>https://hackyjs.com/posts/windows-zero-day-github-ban-understanding-the-exploit-and-defending-against-it</loc>
    <lastmod>2026-05-27T00:00:00.000Z</lastmod>
    <changefreq>weekly</changefreq>
    <priority>0.8</priority>
  </url>
  <url>
    <loc>https://hackyjs.com/posts/auditing-the-angular-language-service-for-rce-a-vulnerability-analysis-of-the-vs-code-extension</loc>
    <lastmod>2026-05-26T00:00:00.000Z</lastmod>
    <changefreq>weekly</changefreq>
    <priority>0.8</priority>
  </url>
  <url>
    <loc>https://hackyjs.com/posts/ghost-cms-cve-2026-26980-practical-mitigation-steps-after-the-clickfix-campaign</loc>
    <lastmod>2026-05-26T00:00:00.000Z</lastmod>
    <changefreq>weekly</changefreq>
    <priority>0.8</priority>
  </url>
  <url>
    <loc>https://hackyjs.com/posts/how-attackers-use-ai-to-sidestep-mfa-on-okta-and-microsoft-365</loc>
    <lastmod>2026-05-26T00:00:00.000Z</lastmod>
    <changefreq>weekly</changefreq>
    <priority>0.8</priority>
  </url>
  <url>
    <loc>https://hackyjs.com/posts/how-ghost-cms-cve-2026-26980-turned-700-websites-into-clickfix-delivery-pages</loc>
    <lastmod>2026-05-26T00:00:00.000Z</lastmod>
    <changefreq>weekly</changefreq>
    <priority>0.8</priority>
  </url>
  <url>
    <loc>https://hackyjs.com/posts/knowledgedelivers-file-upload-flaw-from-zero-day-to-web-shell-rce</loc>
    <lastmod>2026-05-26T00:00:00.000Z</lastmod>
    <changefreq>weekly</changefreq>
    <priority>0.8</priority>
  </url>
  <url>
    <loc>https://hackyjs.com/posts/mitigating-remote-code-execution-in-sharepoint-customizations</loc>
    <lastmod>2026-05-26T00:00:00.000Z</lastmod>
    <changefreq>weekly</changefreq>
    <priority>0.8</priority>
  </url>
  <url>
    <loc>https://hackyjs.com/posts/inside-npms-new-staged-releases-defending-against-scripted-supply-chain-attacks</loc>
    <lastmod>2026-05-25T00:00:00.000Z</lastmod>
    <changefreq>weekly</changefreq>
    <priority>0.8</priority>
  </url>
  <url>
    <loc>https://hackyjs.com/posts/invisibleferret-malware-analysis-evading-static-analysis-with-native-python-extensions</loc>
    <lastmod>2026-05-25T00:00:00.000Z</lastmod>
    <changefreq>weekly</changefreq>
    <priority>0.8</priority>
  </url>
  <url>
    <loc>https://hackyjs.com/posts/the-first-ai-assisted-zero-day-defense-practical-hardening-for-developers</loc>
    <lastmod>2026-05-25T00:00:00.000Z</lastmod>
    <changefreq>weekly</changefreq>
    <priority>0.8</priority>
  </url>
  <url>
    <loc>https://hackyjs.com/posts/auditing-f5-big-ip-for-ssh-persistence-and-lateral-movement-into-linux</loc>
    <lastmod>2026-05-24T00:00:00.000Z</lastmod>
    <changefreq>weekly</changefreq>
    <priority>0.8</priority>
  </url>
  <url>
    <loc>https://hackyjs.com/posts/from-vs-code-to-nginx-two-supply-chain-hits-that-show-where-dependency-trust-fails</loc>
    <lastmod>2026-05-24T00:00:00.000Z</lastmod>
    <changefreq>weekly</changefreq>
    <priority>0.8</priority>
  </url>
  <url>
    <loc>https://hackyjs.com/posts/github-source-code-theft-a-developers-practical-checklist-for-repo-lockdown</loc>
    <lastmod>2026-05-24T00:00:00.000Z</lastmod>
    <changefreq>weekly</changefreq>
    <priority>0.8</priority>
  </url>
  <url>
    <loc>https://hackyjs.com/posts/malicious-packages-on-npm-pypi-and-cratesio-caught-stealing-ssh-keys-and-cloud-credentials</loc>
    <lastmod>2026-05-24T00:00:00.000Z</lastmod>
    <changefreq>weekly</changefreq>
    <priority>0.8</priority>
  </url>
  <url>
    <loc>https://hackyjs.com/posts/the-anatomy-of-a-claude-ai-phishing-attack-evading-safety-controls-at-scale</loc>
    <lastmod>2026-05-24T00:00:00.000Z</lastmod>
    <changefreq>weekly</changefreq>
    <priority>0.8</priority>
  </url>
  <url>
    <loc>https://hackyjs.com/posts/analyzing-cve-2026-48172-root-access-via-the-litespeed-cpanel-plugin</loc>
    <lastmod>2026-05-23T00:00:00.000Z</lastmod>
    <changefreq>weekly</changefreq>
    <priority>0.8</priority>
  </url>
  <url>
    <loc>https://hackyjs.com/posts/auditing-npm-packages-for-hugging-face-delivered-malware-a-practical-look-at-the-latest-supply-chain-tactic</loc>
    <lastmod>2026-05-23T00:00:00.000Z</lastmod>
    <changefreq>weekly</changefreq>
    <priority>0.8</priority>
  </url>
  <url>
    <loc>https://hackyjs.com/posts/auditing-your-github-security-posture-what-the-internal-repo-breach-reveals-about-secrets-scope-and-access-controls</loc>
    <lastmod>2026-05-23T00:00:00.000Z</lastmod>
    <changefreq>weekly</changefreq>
    <priority>0.8</priority>
  </url>
  <url>
    <loc>https://hackyjs.com/posts/breaking-down-the-npm-2fa-bypass-that-forced-a-mass-token-reset</loc>
    <lastmod>2026-05-23T00:00:00.000Z</lastmod>
    <changefreq>weekly</changefreq>
    <priority>0.8</priority>
  </url>
  <url>
    <loc>https://hackyjs.com/posts/dissecting-the-laravel-lang-malicious-update-silent-exfiltration-of-secrets</loc>
    <lastmod>2026-05-23T00:00:00.000Z</lastmod>
    <changefreq>weekly</changefreq>
    <priority>0.8</priority>
  </url>
  <url>
    <loc>https://hackyjs.com/posts/dissecting-the-packagist-attack-github-hosted-malware-review-evasion-and-composer-pipeline-defense</loc>
    <lastmod>2026-05-23T00:00:00.000Z</lastmod>
    <changefreq>weekly</changefreq>
    <priority>0.8</priority>
  </url>
  <url>
    <loc>https://hackyjs.com/posts/how-megalodon-automated-5500-github-repo-compromisesand-the-defenses-that-work</loc>
    <lastmod>2026-05-23T00:00:00.000Z</lastmod>
    <changefreq>weekly</changefreq>
    <priority>0.8</priority>
  </url>
  <url>
    <loc>https://hackyjs.com/posts/how-to-audit-your-github-repo-access-and-secrets-after-the-4k-repo-breach</loc>
    <lastmod>2026-05-23T00:00:00.000Z</lastmod>
    <changefreq>weekly</changefreq>
    <priority>0.8</priority>
  </url>
  <url>
    <loc>https://hackyjs.com/posts/mitigating-the-leaked-chromium-exploit-practical-defensive-steps-for-developers</loc>
    <lastmod>2026-05-23T00:00:00.000Z</lastmod>
    <changefreq>weekly</changefreq>
    <priority>0.8</priority>
  </url>
  <url>
    <loc>https://hackyjs.com/posts/testing-patches-for-real-lessons-from-the-sonicwall-ssl-vpn-bypass</loc>
    <lastmod>2026-05-23T00:00:00.000Z</lastmod>
    <changefreq>weekly</changefreq>
    <priority>0.8</priority>
  </url>
  <url>
    <loc>https://hackyjs.com/posts/tracing-the-dach-ransomware-kill-chain-code-level-defenses-for-web-applications</loc>
    <lastmod>2026-05-23T00:00:00.000Z</lastmod>
    <changefreq>weekly</changefreq>
    <priority>0.8</priority>
  </url>
  <url>
    <loc>https://hackyjs.com/posts/using-npms-enforced-2fa-and-package-controls-to-harden-your-javascript-supply-chain</loc>
    <lastmod>2026-05-23T00:00:00.000Z</lastmod>
    <changefreq>weekly</changefreq>
    <priority>0.8</priority>
  </url>
  <url>
    <loc>https://hackyjs.com/posts/auditing-vs-code-extensions-after-the-nx-console-breach-what-every-developer-should-check</loc>
    <lastmod>2026-05-22T00:00:00.000Z</lastmod>
    <changefreq>weekly</changefreq>
    <priority>0.8</priority>
  </url>
  <url>
    <loc>https://hackyjs.com/posts/postgresql-rce-after-20-years-how-the-poc-works-and-how-to-harden-your-database</loc>
    <lastmod>2026-05-22T00:00:00.000Z</lastmod>
    <changefreq>weekly</changefreq>
    <priority>0.8</priority>
  </url>
  <url>
    <loc>https://hackyjs.com/posts/redsun-and-undefend-a-technical-walkthrough-of-two-exploited-defender-vulnerabilities-and-their-fixes</loc>
    <lastmod>2026-05-22T00:00:00.000Z</lastmod>
    <changefreq>weekly</changefreq>
    <priority>0.8</priority>
  </url>
  <url>
    <loc>https://hackyjs.com/posts/security-software-as-initial-access-dissecting-the-trend-micro-apex-one-zero-day</loc>
    <lastmod>2026-05-22T00:00:00.000Z</lastmod>
    <changefreq>weekly</changefreq>
    <priority>0.8</priority>
  </url>
  <url>
    <loc>https://hackyjs.com/posts/when-browser-exploit-code-drops-before-a-fix-practical-steps-for-web-developers</loc>
    <lastmod>2026-05-22T00:00:00.000Z</lastmod>
    <changefreq>weekly</changefreq>
    <priority>0.8</priority>
  </url>
  <url>
    <loc>https://hackyjs.com/posts/dissecting-mini-shai-hulud-how-attackers-harvested-cicd-secrets-from-antv-npm-packages</loc>
    <lastmod>2026-05-21T00:00:00.000Z</lastmod>
    <changefreq>weekly</changefreq>
    <priority>0.8</priority>
  </url>
  <url>
    <loc>https://hackyjs.com/posts/emergency-microsoft-defender-patches-for-undefend-and-redsun-a-technical-guide-for-developers</loc>
    <lastmod>2026-05-21T00:00:00.000Z</lastmod>
    <changefreq>weekly</changefreq>
    <priority>0.8</priority>
  </url>
  <url>
    <loc>https://hackyjs.com/posts/how-to-detect-the-north-korean-npm-infostealer-rat-in-your-supply-chain</loc>
    <lastmod>2026-05-21T00:00:00.000Z</lastmod>
    <changefreq>weekly</changefreq>
    <priority>0.8</priority>
  </url>
  <url>
    <loc>https://hackyjs.com/posts/pwn2own-2026-a-kernel-flaw-that-broke-browser-sandbox-isolation</loc>
    <lastmod>2026-05-21T00:00:00.000Z</lastmod>
    <changefreq>weekly</changefreq>
    <priority>0.8</priority>
  </url>
  <url>
    <loc>https://hackyjs.com/posts/recreating-cve-2026-9082-testing-drupals-query-builder-for-sql-injection-on-postgresql</loc>
    <lastmod>2026-05-21T00:00:00.000Z</lastmod>
    <changefreq>weekly</changefreq>
    <priority>0.8</priority>
  </url>
  <url>
    <loc>https://hackyjs.com/posts/auditing-nginx-for-cve-2026-42945-the-http3-smuggling-to-rce-kill-chain</loc>
    <lastmod>2026-05-20T00:00:00.000Z</lastmod>
    <changefreq>weekly</changefreq>
    <priority>0.8</priority>
  </url>
  <url>
    <loc>https://hackyjs.com/posts/auditing-npm-for-name-confusion-lessons-from-the-600-compromised-packages</loc>
    <lastmod>2026-05-20T00:00:00.000Z</lastmod>
    <changefreq>weekly</changefreq>
    <priority>0.8</priority>
  </url>
  <url>
    <loc>https://hackyjs.com/posts/claude-codes-sandbox-bypass-shows-why-you-cant-trust-ai-tool-isolation-yet</loc>
    <lastmod>2026-05-20T00:00:00.000Z</lastmod>
    <changefreq>weekly</changefreq>
    <priority>0.8</priority>
  </url>
  <url>
    <loc>https://hackyjs.com/posts/postgresql-rce-from-2004-poc-exploit-dissected-password-timing-attack-and-patch-prioritization</loc>
    <lastmod>2026-05-20T00:00:00.000Z</lastmod>
    <changefreq>weekly</changefreq>
    <priority>0.8</priority>
  </url>
  <url>
    <loc>https://hackyjs.com/posts/what-the-github-vs-code-extension-breach-teaches-about-developer-endpoint-security</loc>
    <lastmod>2026-05-20T00:00:00.000Z</lastmod>
    <changefreq>weekly</changefreq>
    <priority>0.8</priority>
  </url>
  <url>
    <loc>https://hackyjs.com/posts/why-vulnerability-exploitation-overtook-stolen-credentials-in-the-2026-dbir-and-what-it-means-for-your-pipelines</loc>
    <lastmod>2026-05-20T00:00:00.000Z</lastmod>
    <changefreq>weekly</changefreq>
    <priority>0.8</priority>
  </url>
  <url>
    <loc>https://hackyjs.com/posts/agent-orchestration-injection-lessons-from-the-openclaw-takeover</loc>
    <lastmod>2026-05-19T00:00:00.000Z</lastmod>
    <changefreq>weekly</changefreq>
    <priority>0.8</priority>
  </url>
  <url>
    <loc>https://hackyjs.com/posts/analyzing-a-multi-stage-javascript-dropper-that-delivers-a-crypto-clipper-via-powershell</loc>
    <lastmod>2026-05-19T00:00:00.000Z</lastmod>
    <changefreq>weekly</changefreq>
    <priority>0.8</priority>
  </url>
  <url>
    <loc>https://hackyjs.com/posts/auditing-github-actions-workflows-for-tag-spoofing-and-credential-theft</loc>
    <lastmod>2026-05-19T00:00:00.000Z</lastmod>
    <changefreq>weekly</changefreq>
    <priority>0.8</priority>
  </url>
  <url>
    <loc>https://hackyjs.com/posts/auditing-your-repos-for-accidentally-exposed-aws-govcloud-keys</loc>
    <lastmod>2026-05-19T00:00:00.000Z</lastmod>
    <changefreq>weekly</changefreq>
    <priority>0.8</priority>
  </url>
  <url>
    <loc>https://hackyjs.com/posts/steps-to-verify-your-nx-console-extension-didnt-leak-developer-credentials</loc>
    <lastmod>2026-05-19T00:00:00.000Z</lastmod>
    <changefreq>weekly</changefreq>
    <priority>0.8</priority>
  </url>
  <url>
    <loc>https://hackyjs.com/posts/what-to-do-before-drupals-critical-rce-patch-drops-a-practical-checklist</loc>
    <lastmod>2026-05-19T00:00:00.000Z</lastmod>
    <changefreq>weekly</changefreq>
    <priority>0.8</priority>
  </url>
  <url>
    <loc>https://hackyjs.com/posts/why-claude-codes-deeplink-handler-allowed-rce-and-how-to-fix-it-in-your-own-cli-tools</loc>
    <lastmod>2026-05-19T00:00:00.000Z</lastmod>
    <changefreq>weekly</changefreq>
    <priority>0.8</priority>
  </url>
  <url>
    <loc>https://hackyjs.com/posts/akamais-layerx-buy-from-a-javascript-security-engineers-perspective-ai-extensions-and-enterprise-browsers</loc>
    <lastmod>2026-05-18T00:00:00.000Z</lastmod>
    <changefreq>weekly</changefreq>
    <priority>0.8</priority>
  </url>
  <url>
    <loc>https://hackyjs.com/posts/browser-exploits-crafted-by-ai-stress-testing-the-new-model-benchmark</loc>
    <lastmod>2026-05-18T00:00:00.000Z</lastmod>
    <changefreq>weekly</changefreq>
    <priority>0.8</priority>
  </url>
  <url>
    <loc>https://hackyjs.com/posts/how-the-funnel-builder-flaw-lets-attackers-inject-card-stealing-scripts-into-woocommerce-checkout</loc>
    <lastmod>2026-05-18T00:00:00.000Z</lastmod>
    <changefreq>weekly</changefreq>
    <priority>0.8</priority>
  </url>
  <url>
    <loc>https://hackyjs.com/posts/the-grafana-token-leak-a-case-study-in-cicd-secret-hygiene</loc>
    <lastmod>2026-05-18T00:00:00.000Z</lastmod>
    <changefreq>weekly</changefreq>
    <priority>0.8</priority>
  </url>
  <url>
    <loc>https://hackyjs.com/posts/understanding-the-nginx-worker-crash-exploit-thats-targeting-nodejs-backends</loc>
    <lastmod>2026-05-18T00:00:00.000Z</lastmod>
    <changefreq>weekly</changefreq>
    <priority>0.8</priority>
  </url>
  <url>
    <loc>https://hackyjs.com/posts/ci-pipeline-abuse-what-the-grafana-hack-tells-us-about-secret-management</loc>
    <lastmod>2026-05-17T00:00:00.000Z</lastmod>
    <changefreq>weekly</changefreq>
    <priority>0.8</priority>
  </url>
  <url>
    <loc>https://hackyjs.com/posts/emergency-defenses-for-the-unpatched-exchange-server-zero-day-attack</loc>
    <lastmod>2026-05-17T00:00:00.000Z</lastmod>
    <changefreq>weekly</changefreq>
    <priority>0.8</priority>
  </url>
  <url>
    <loc>https://hackyjs.com/posts/tracing-the-nextjs-cloud-credential-leak-into-active-woocommerce-checkout-skimming-attacks</loc>
    <lastmod>2026-05-17T00:00:00.000Z</lastmod>
    <changefreq>weekly</changefreq>
    <priority>0.8</priority>
  </url>
  <url>
    <loc>https://hackyjs.com/posts/auditing-nextjs-for-leaked-secrets-in-server-components</loc>
    <lastmod>2026-05-16T00:00:00.000Z</lastmod>
    <changefreq>weekly</changefreq>
    <priority>0.8</priority>
  </url>
  <url>
    <loc>https://hackyjs.com/posts/auditing-the-shai-hulud-worm-from-npm-script-to-stolen-aws-github-and-k8s-credentials</loc>
    <lastmod>2026-05-16T00:00:00.000Z</lastmod>
    <changefreq>weekly</changefreq>
    <priority>0.8</priority>
  </url>
  <url>
    <loc>https://hackyjs.com/posts/zero-day-discovery-goes-ai-googles-defense-m5-bypass-and-the-nginx-bug-that-lived-18-years</loc>
    <lastmod>2026-05-16T00:00:00.000Z</lastmod>
    <changefreq>weekly</changefreq>
    <priority>0.8</priority>
  </url>
  <url>
    <loc>https://hackyjs.com/posts/crafted-email-to-system-tracing-cve-2026-42897s-attack-path-on-unpatched-exchange</loc>
    <lastmod>2026-05-15T00:00:00.000Z</lastmod>
    <changefreq>weekly</changefreq>
    <priority>0.8</priority>
  </url>
  <url>
    <loc>https://hackyjs.com/posts/cve-2026-20182-deep-dive-why-cisco-sd-wan-controllers-trusted-a-malformed-request-and-how-to-patch-fast</loc>
    <lastmod>2026-05-15T00:00:00.000Z</lastmod>
    <changefreq>weekly</changefreq>
    <priority>0.8</priority>
  </url>
  <url>
    <loc>https://hackyjs.com/posts/dissecting-the-shai-hulud-worm-how-a-single-npm-package-escalates-to-cloud-takeover</loc>
    <lastmod>2026-05-15T00:00:00.000Z</lastmod>
    <changefreq>weekly</changefreq>
    <priority>0.8</priority>
  </url>
  <url>
    <loc>https://hackyjs.com/posts/a-counterfeit-npm-package-450-exposed-repos-dissecting-the-tanstack-supply-chain-incident</loc>
    <lastmod>2026-05-14T00:00:00.000Z</lastmod>
    <changefreq>weekly</changefreq>
    <priority>0.8</priority>
  </url>
  <url>
    <loc>https://hackyjs.com/posts/how-170-npm-packages-were-weaponized-to-exfiltrate-github-aws-and-kubernetes-credentials</loc>
    <lastmod>2026-05-14T00:00:00.000Z</lastmod>
    <changefreq>weekly</changefreq>
    <priority>0.8</priority>
  </url>
  <url>
    <loc>https://hackyjs.com/posts/unpacking-the-first-aigenerated-zeroday-implications-for-javascript-supplychain-hardening</loc>
    <lastmod>2026-05-14T00:00:00.000Z</lastmod>
    <changefreq>weekly</changefreq>
    <priority>0.8</priority>
  </url>
  <url>
    <loc>https://hackyjs.com/posts/84-packages-one-goal-credential-theft-from-ci-builds-in-the-tanstack-compromise</loc>
    <lastmod>2026-05-13T00:00:00.000Z</lastmod>
    <changefreq>weekly</changefreq>
    <priority>0.8</priority>
  </url>
  <url>
    <loc>https://hackyjs.com/posts/checking-your-nginx-configuration-for-the-rift-vulnerability</loc>
    <lastmod>2026-05-13T00:00:00.000Z</lastmod>
    <changefreq>weekly</changefreq>
    <priority>0.8</priority>
  </url>
  <url>
    <loc>https://hackyjs.com/posts/finding-and-rotating-leaked-github-tokens-in-ci-logs-the-composer-bug-as-a-case-study</loc>
    <lastmod>2026-05-13T00:00:00.000Z</lastmod>
    <changefreq>weekly</changefreq>
    <priority>0.8</priority>
  </url>
  <url>
    <loc>https://hackyjs.com/posts/auditing-your-bec-playbook-for-physical-extortion-a-practical-guide</loc>
    <lastmod>2026-05-12T00:00:00.000Z</lastmod>
    <changefreq>weekly</changefreq>
    <priority>0.8</priority>
  </url>
  <url>
    <loc>https://hackyjs.com/posts/detecting-credential-exfiltration-in-npm-supply-chains-a-walkthrough-of-the-tanstack-compromise</loc>
    <lastmod>2026-05-12T00:00:00.000Z</lastmod>
    <changefreq>weekly</changefreq>
    <priority>0.8</priority>
  </url>
  <url>
    <loc>https://hackyjs.com/posts/kernel-kill-switch-a-devops-playbook-for-mitigating-zero-day-vulnerabilities</loc>
    <lastmod>2026-05-12T00:00:00.000Z</lastmod>
    <changefreq>weekly</changefreq>
    <priority>0.8</priority>
  </url>
  <url>
    <loc>https://hackyjs.com/posts/one-click-rce-in-open-webui-a-practical-breakdown-of-the-file-upload-attack</loc>
    <lastmod>2026-05-12T00:00:00.000Z</lastmod>
    <changefreq>weekly</changefreq>
    <priority>0.8</priority>
  </url>
  <url>
    <loc>https://hackyjs.com/posts/typosquatting-on-github-the-fake-deepseek-tui-repositories-and-what-they-teach-about-dependency-trust</loc>
    <lastmod>2026-05-12T00:00:00.000Z</lastmod>
    <changefreq>weekly</changefreq>
    <priority>0.8</priority>
  </url>
  <url>
    <loc>https://hackyjs.com/posts/ai-assisted-exploitation-moves-from-lab-to-real-zero-day-why-authorization-logic-in-multi-tenant-apps-is-now-a-critical-target</loc>
    <lastmod>2026-05-11T00:00:00.000Z</lastmod>
    <changefreq>weekly</changefreq>
    <priority>0.8</priority>
  </url>
  <url>
    <loc>https://hackyjs.com/posts/ai-didnt-magic-an-exploit-it-broke-a-trust-assumption-in-2fa</loc>
    <lastmod>2026-05-11T00:00:00.000Z</lastmod>
    <changefreq>weekly</changefreq>
    <priority>0.8</priority>
  </url>
  <url>
    <loc>https://hackyjs.com/posts/ai-found-a-zero-day-in-an-open-source-admin-tool-2fa-bypassed-by-a-broken-trust-assumption</loc>
    <lastmod>2026-05-11T00:00:00.000Z</lastmod>
    <changefreq>weekly</changefreq>
    <priority>0.8</priority>
  </url>
  <url>
    <loc>https://hackyjs.com/posts/how-ai-helped-find-a-2fa-bypass-in-an-open-source-admin-tool-and-why-trust-assumptions-fail</loc>
    <lastmod>2026-05-11T00:00:00.000Z</lastmod>
    <changefreq>weekly</changefreq>
    <priority>0.8</priority>
  </url>
  <url>
    <loc>https://hackyjs.com/posts/the-2fa-bypass-that-ai-found-backend-auth-is-still-non-negotiable</loc>
    <lastmod>2026-05-11T00:00:00.000Z</lastmod>
    <changefreq>weekly</changefreq>
    <priority>0.8</priority>
  </url>
  <url>
    <loc>https://hackyjs.com/posts/the-open-source-admin-panel-that-ai-used-to-bypass-2fa-lessons-for-developers</loc>
    <lastmod>2026-05-11T00:00:00.000Z</lastmod>
    <changefreq>weekly</changefreq>
    <priority>0.8</priority>
  </url>
  <url>
    <loc>https://hackyjs.com/posts/using-devtools-to-investigate-the-first-ai-generated-2fa-bypass-exploit</loc>
    <lastmod>2026-05-11T00:00:00.000Z</lastmod>
    <changefreq>weekly</changefreq>
    <priority>0.8</priority>
  </url>
  <url>
    <loc>https://hackyjs.com/posts/when-ai-found-a-real-vulnerability-a-two-factor-authentication-bypass-in-an-open-source-tool</loc>
    <lastmod>2026-05-11T00:00:00.000Z</lastmod>
    <changefreq>weekly</changefreq>
    <priority>0.8</priority>
  </url>
  <url>
    <loc>https://hackyjs.com/posts/why-web-admin-tool-trust-assumptions-fail-the-ai-assisted-2fa-bypass-incident</loc>
    <lastmod>2026-05-11T00:00:00.000Z</lastmod>
    <changefreq>weekly</changefreq>
    <priority>0.8</priority>
  </url>
  <url>
    <loc>https://hackyjs.com/posts/why-your-admin-panels-2fa-trust-assumption-might-be-its-biggest-weakness</loc>
    <lastmod>2026-05-11T00:00:00.000Z</lastmod>
    <changefreq>weekly</changefreq>
    <priority>0.8</priority>
  </url>
  <url>
    <loc>https://hackyjs.com/posts/dirty-frag-shows-why-local-only-linux-bugs-still-matter-to-web-teams</loc>
    <lastmod>2026-05-10T00:00:00.000Z</lastmod>
    <changefreq>weekly</changefreq>
    <priority>0.8</priority>
  </url>
  <url>
    <loc>https://hackyjs.com/posts/mozillas-mythos-experiment-shows-ai-bug-hunting-is-becoming-real-defensive-engineering</loc>
    <lastmod>2026-05-10T00:00:00.000Z</lastmod>
    <changefreq>weekly</changefreq>
    <priority>0.8</priority>
  </url>
  <url>
    <loc>https://hackyjs.com/posts/copy-fail-and-dirty-frag-show-why-local-kernel-bugs-still-matter-to-web-teams</loc>
    <lastmod>2026-05-09T00:00:00.000Z</lastmod>
    <changefreq>weekly</changefreq>
    <priority>0.8</priority>
  </url>
  <url>
    <loc>https://hackyjs.com/posts/copy-fail-shows-why-one-local-linux-bug-can-break-cloud-ci-and-containers</loc>
    <lastmod>2026-05-09T00:00:00.000Z</lastmod>
    <changefreq>weekly</changefreq>
    <priority>0.8</priority>
  </url>
  <url>
    <loc>https://hackyjs.com/posts/dirty-frag-shows-the-linux-page-cache-bug-class-is-not-finished</loc>
    <lastmod>2026-05-09T00:00:00.000Z</lastmod>
    <changefreq>weekly</changefreq>
    <priority>0.8</priority>
  </url>
  <url>
    <loc>https://hackyjs.com/posts/auditing-deepseek-v4-flash-for-token-budget-exhaustion-and-instruction-drift</loc>
    <lastmod>2026-05-08T00:00:00.000Z</lastmod>
    <changefreq>weekly</changefreq>
    <priority>0.8</priority>
  </url>
  <url>
    <loc>https://hackyjs.com/posts/deepseek-v4-pros-1m-context-in-practice-retrieval-relevance-and-edge-cases</loc>
    <lastmod>2026-05-08T00:00:00.000Z</lastmod>
    <changefreq>weekly</changefreq>
    <priority>0.8</priority>
  </url>
  <url>
    <loc>https://hackyjs.com/posts/import-time-execution-how-the-pytorch-lightning-backdoor-turned-ml-dependencies-into-stealers</loc>
    <lastmod>2026-05-08T00:00:00.000Z</lastmod>
    <changefreq>weekly</changefreq>
    <priority>0.8</priority>
  </url>
  <url>
    <loc>https://hackyjs.com/posts/testing-ai-generated-code-vm2-escapes-prove-sandbox-isolation-is-still-broken</loc>
    <lastmod>2026-05-08T00:00:00.000Z</lastmod>
    <changefreq>weekly</changefreq>
    <priority>0.8</priority>
  </url>
  <url>
    <loc>https://hackyjs.com/posts/testing-jwt-implementation-in-nodejs-apis-for-common-pitfalls</loc>
    <lastmod>2026-05-08T00:00:00.000Z</lastmod>
    <changefreq>weekly</changefreq>
    <priority>0.8</priority>
  </url>
  <url>
    <loc>https://hackyjs.com/posts/when-subresource-integrity-fails-dynamic-scripts-and-imported-modules</loc>
    <lastmod>2026-05-08T00:00:00.000Z</lastmod>
    <changefreq>weekly</changefreq>
    <priority>0.8</priority>
  </url>
  <url>
    <loc>https://hackyjs.com/posts/testing-for-vm2-sandbox-bypasses-what-to-look-for-in-user-run-script-features</loc>
    <lastmod>2026-05-07T00:00:00.000Z</lastmod>
    <changefreq>weekly</changefreq>
    <priority>0.8</priority>
  </url>
  <url>
    <loc>https://hackyjs.com/posts/security-appliances-are-not-web-apps-cve-2026-0300-and-the-blast-radius-problem</loc>
    <lastmod>2026-05-06T00:00:00.000Z</lastmod>
    <changefreq>weekly</changefreq>
    <priority>0.8</priority>
  </url>
  <url>
    <loc>https://hackyjs.com/posts/googles-vrps-just-told-researchers-prove-exploitability-or-your-ai-assisted-writeup-wont-cut-it</loc>
    <lastmod>2026-05-05T00:00:00.000Z</lastmod>
    <changefreq>weekly</changefreq>
    <priority>0.8</priority>
  </url>
  <url>
    <loc>https://hackyjs.com/posts/ai-supply-chain-attack-pytorch-lightning-262-ran-a-javascript-credential-stealer-on-import</loc>
    <lastmod>2026-05-04T00:00:00.000Z</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.7</priority>
  </url>
  <url>
    <loc>https://hackyjs.com/posts/litellm-sql-injection-shows-ai-gateways-are-becoming-credential-vaults</loc>
    <lastmod>2026-05-03T00:00:00.000Z</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.7</priority>
  </url>
  <url>
    <loc>https://hackyjs.com/posts/fake-gemini-cli-tools-are-the-new-developer-malware-trap</loc>
    <lastmod>2026-05-02T00:00:00.000Z</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.7</priority>
  </url>
  <url>
    <loc>https://hackyjs.com/posts/authencesns-dirty-scratch-pad-why-a-4-byte-write-in-the-crypto-stack-keeps-showing-up-uninvited</loc>
    <lastmod>2026-05-01T00:00:00.000Z</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.7</priority>
  </url>
  <url>
    <loc>https://hackyjs.com/posts/no-patch-no-coercion-abusing-windows-diagnostic-infrastructure-for-silent-system-escalation</loc>
    <lastmod>2026-04-30T00:00:00.000Z</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.7</priority>
  </url>
  <url>
    <loc>https://hackyjs.com/posts/ai-assisted-discovery-of-a-remote-code-execution-vulnerability-in-githubs-closed-source-binaries</loc>
    <lastmod>2026-04-29T00:00:00.000Z</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.7</priority>
  </url>
  <url>
    <loc>https://hackyjs.com/posts/dissecting-cve-2026-32202-the-zero-click-ntlm-leak-from-an-incomplete-patch</loc>
    <lastmod>2026-04-29T00:00:00.000Z</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.7</priority>
  </url>
  <url>
    <loc>https://hackyjs.com/posts/how-ai-uncovered-a-critical-rce-in-githubs-internal-git-infrastructure</loc>
    <lastmod>2026-04-29T00:00:00.000Z</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.7</priority>
  </url>
  <url>
    <loc>https://hackyjs.com/posts/when-cpanel-login-became-optional-the-authentication-bypass-that-temporarily-killed-hosting-access</loc>
    <lastmod>2026-04-29T00:00:00.000Z</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.7</priority>
  </url>
  <url>
    <loc>https://hackyjs.com/posts/npm-install-scripts-as-attack-surface-the-bitwarden-cli-compromise-and-what-npm-users-should-test</loc>
    <lastmod>2026-04-28T00:00:00.000Z</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.7</priority>
  </url>
  <url>
    <loc>https://hackyjs.com/posts/ai-generated-code-how-a-false-sense-of-completion-leads-to-real-bugs</loc>
    <lastmod>2026-04-27T00:00:00.000Z</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.7</priority>
  </url>
  <url>
    <loc>https://hackyjs.com/posts/auditing-ai-assisted-apps-finding-bugs-in-code-you-didnt-write</loc>
    <lastmod>2026-04-27T00:00:00.000Z</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.7</priority>
  </url>
  <url>
    <loc>https://hackyjs.com/posts/auditing-ai-assisted-code-contributions-for-silent-vulnerabilities</loc>
    <lastmod>2026-04-27T00:00:00.000Z</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.7</priority>
  </url>
  <url>
    <loc>https://hackyjs.com/posts/auditing-ai-built-authentication-the-same-broken-access-control-just-faster</loc>
    <lastmod>2026-04-27T00:00:00.000Z</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.7</priority>
  </url>
  <url>
    <loc>https://hackyjs.com/posts/auditing-ai-coding-agent-policies-for-prompt-injection-in-pr-descriptions</loc>
    <lastmod>2026-04-27T00:00:00.000Z</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.7</priority>
  </url>
  <url>
    <loc>https://hackyjs.com/posts/auditing-browser-storage-for-cross-account-state-a-practical-privacy-walkthrough</loc>
    <lastmod>2026-04-27T00:00:00.000Z</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.7</priority>
  </url>
  <url>
    <loc>https://hackyjs.com/posts/auditing-log-coverage-finding-the-events-you-are-not-recording</loc>
    <lastmod>2026-04-27T00:00:00.000Z</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.7</priority>
  </url>
  <url>
    <loc>https://hackyjs.com/posts/auditing-vibe-coded-apps-missing-authentication-cors-and-input-validation</loc>
    <lastmod>2026-04-27T00:00:00.000Z</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.7</priority>
  </url>
  <url>
    <loc>https://hackyjs.com/posts/auditing-vibe-coded-javascript-for-production-security-gaps</loc>
    <lastmod>2026-04-27T00:00:00.000Z</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.7</priority>
  </url>
  <url>
    <loc>https://hackyjs.com/posts/auditing-web-storage-for-session-hijacking-opportunities</loc>
    <lastmod>2026-04-27T00:00:00.000Z</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.7</priority>
  </url>
  <url>
    <loc>https://hackyjs.com/posts/blind-trust-in-vibe-coding-how-stack-ignorance-leads-to-broken-authorization</loc>
    <lastmod>2026-04-27T00:00:00.000Z</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.7</priority>
  </url>
  <url>
    <loc>https://hackyjs.com/posts/event-handling-re-renders-and-the-cost-of-not-understanding-the-dom</loc>
    <lastmod>2026-04-27T00:00:00.000Z</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.7</priority>
  </url>
  <url>
    <loc>https://hackyjs.com/posts/finding-postmessage-origin-validation-failures-in-production</loc>
    <lastmod>2026-04-27T00:00:00.000Z</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.7</priority>
  </url>
  <url>
    <loc>https://hackyjs.com/posts/finding-security-bugs-in-code-you-dont-remember-writing</loc>
    <lastmod>2026-04-27T00:00:00.000Z</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.7</priority>
  </url>
  <url>
    <loc>https://hackyjs.com/posts/from-kev-alert-to-remediation-turning-patch-velocity-into-a-decision-metric</loc>
    <lastmod>2026-04-27T00:00:00.000Z</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.7</priority>
  </url>
  <url>
    <loc>https://hackyjs.com/posts/missing-error-boundaries-missing-auth-checks-the-vibe-coded-production-trap</loc>
    <lastmod>2026-04-27T00:00:00.000Z</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.7</priority>
  </url>
  <url>
    <loc>https://hackyjs.com/posts/no-separate-lane-how-april-2026s-incidents-redefined-ai-security-as-appsec</loc>
    <lastmod>2026-04-27T00:00:00.000Z</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.7</priority>
  </url>
  <url>
    <loc>https://hackyjs.com/posts/testing-agent-execution-boundaries-a-practical-guide-to-sandbox-isolation</loc>
    <lastmod>2026-04-27T00:00:00.000Z</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.7</priority>
  </url>
  <url>
    <loc>https://hackyjs.com/posts/testing-ai-generated-code-for-xss-csrf-and-broken-authorization</loc>
    <lastmod>2026-04-27T00:00:00.000Z</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.7</priority>
  </url>
  <url>
    <loc>https://hackyjs.com/posts/testing-csv-pdf-and-excel-exports-for-permission-bypasses</loc>
    <lastmod>2026-04-27T00:00:00.000Z</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.7</priority>
  </url>
  <url>
    <loc>https://hackyjs.com/posts/testing-internal-dashboards-for-authorization-bugs-with-javascript</loc>
    <lastmod>2026-04-27T00:00:00.000Z</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.7</priority>
  </url>
  <url>
    <loc>https://hackyjs.com/posts/testing-prompt-injection-via-pull-request-comments-in-ai-coding-agents</loc>
    <lastmod>2026-04-27T00:00:00.000Z</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.7</priority>
  </url>
  <url>
    <loc>https://hackyjs.com/posts/testing-workspace-invite-flows-for-authorization-bugs</loc>
    <lastmod>2026-04-27T00:00:00.000Z</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.7</priority>
  </url>
  <url>
    <loc>https://hackyjs.com/posts/the-30k-checkout-hack-how-a-junior-devs-ai-assisted-code-failed</loc>
    <lastmod>2026-04-27T00:00:00.000Z</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.7</priority>
  </url>
  <url>
    <loc>https://hackyjs.com/posts/the-real-risk-of-vibe-coding-failing-to-understand-the-web-platform</loc>
    <lastmod>2026-04-27T00:00:00.000Z</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.7</priority>
  </url>
  <url>
    <loc>https://hackyjs.com/posts/vibe-codings-blind-spots-a-security-audit-of-ai-generated-javascript</loc>
    <lastmod>2026-04-27T00:00:00.000Z</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.7</priority>
  </url>
  <url>
    <loc>https://hackyjs.com/posts/what-ai-generated-react-code-gets-wrong-about-authorization</loc>
    <lastmod>2026-04-27T00:00:00.000Z</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.7</priority>
  </url>
  <url>
    <loc>https://hackyjs.com/posts/what-nodejs-teams-should-actually-do-after-the-axios-compromise</loc>
    <lastmod>2026-04-27T00:00:00.000Z</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.7</priority>
  </url>
  <url>
    <loc>https://hackyjs.com/posts/what-vendor-assessments-actually-measure-your-products-security-architecture-and-process-maturity</loc>
    <lastmod>2026-04-27T00:00:00.000Z</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.7</priority>
  </url>
  <url>
    <loc>https://hackyjs.com/posts/why-prompt-driven-development-leaves-security-blind-spots</loc>
    <lastmod>2026-04-27T00:00:00.000Z</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.7</priority>
  </url>
  <url>
    <loc>https://hackyjs.com/posts/writing-bug-bounty-reports-that-ai-can-polish-but-only-you-can-prove</loc>
    <lastmod>2026-04-27T00:00:00.000Z</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.7</priority>
  </url>
  <url>
    <loc>https://hackyjs.com/posts/ai-assisted-reconnaissance-automating-target-enumeration-with-llms</loc>
    <lastmod>2026-04-26T00:00:00.000Z</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.7</priority>
  </url>
  <url>
    <loc>https://hackyjs.com/posts/ai-augmented-fuzzing-for-graphql-apis</loc>
    <lastmod>2026-04-26T00:00:00.000Z</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.7</priority>
  </url>
  <url>
    <loc>https://hackyjs.com/posts/ai-based-taint-tracking-for-sensitive-data-exposure-in-large-codebases</loc>
    <lastmod>2026-04-26T00:00:00.000Z</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.7</priority>
  </url>
  <url>
    <loc>https://hackyjs.com/posts/alert-fatigue-is-a-vulnerability-lets-start-treating-it-like-one</loc>
    <lastmod>2026-04-26T00:00:00.000Z</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.7</priority>
  </url>
  <url>
    <loc>https://hackyjs.com/posts/beyond-dont-click-that-the-compact-security-aphorisms-that-build-a-breach-ready-posture</loc>
    <lastmod>2026-04-26T00:00:00.000Z</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.7</priority>
  </url>
  <url>
    <loc>https://hackyjs.com/posts/building-an-ai-powered-reconnaissance-pipeline-with-python</loc>
    <lastmod>2026-04-26T00:00:00.000Z</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.7</priority>
  </url>
  <url>
    <loc>https://hackyjs.com/posts/case-study-how-ai-helped-uncover-a-critical-business-logic-flaw</loc>
    <lastmod>2026-04-26T00:00:00.000Z</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.7</priority>
  </url>
  <url>
    <loc>https://hackyjs.com/posts/claude-cli-for-code-review-handling-confidential-codebases-safely</loc>
    <lastmod>2026-04-26T00:00:00.000Z</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.7</priority>
  </url>
  <url>
    <loc>https://hackyjs.com/posts/codex-in-the-loop-integrating-ai-code-review-into-cicd</loc>
    <lastmod>2026-04-26T00:00:00.000Z</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.7</priority>
  </url>
  <url>
    <loc>https://hackyjs.com/posts/cursor-ide-building-a-custom-review-agent-with-rules-and-memory</loc>
    <lastmod>2026-04-26T00:00:00.000Z</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.7</priority>
  </url>
  <url>
    <loc>https://hackyjs.com/posts/from-novice-to-auditor-a-structured-ai-assisted-learning-path-for-web-security</loc>
    <lastmod>2026-04-26T00:00:00.000Z</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.7</priority>
  </url>
  <url>
    <loc>https://hackyjs.com/posts/gemini-cli-and-the-art-of-reviewing-large-codebases</loc>
    <lastmod>2026-04-26T00:00:00.000Z</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.7</priority>
  </url>
  <url>
    <loc>https://hackyjs.com/posts/pair-reviewing-with-copilot-combining-human-insight-and-ai-precision</loc>
    <lastmod>2026-04-26T00:00:00.000Z</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.7</priority>
  </url>
  <url>
    <loc>https://hackyjs.com/posts/prompt-injection-defenses-architecting-trust-boundaries-for-llms</loc>
    <lastmod>2026-04-26T00:00:00.000Z</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.7</priority>
  </url>
  <url>
    <loc>https://hackyjs.com/posts/red-teaming-language-models-finding-blind-spots-in-llm-powered-apps</loc>
    <lastmod>2026-04-26T00:00:00.000Z</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.7</priority>
  </url>
  <url>
    <loc>https://hackyjs.com/posts/responsible-disclosure-is-broken-a-security-researchers-perspective</loc>
    <lastmod>2026-04-26T00:00:00.000Z</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.7</priority>
  </url>
  <url>
    <loc>https://hackyjs.com/posts/securing-the-ai-supply-chain-model-integrity-checks</loc>
    <lastmod>2026-04-26T00:00:00.000Z</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.7</priority>
  </url>
  <url>
    <loc>https://hackyjs.com/posts/the-practitioners-trade-off-cost-of-ai-api-calls-vs-security-gains</loc>
    <lastmod>2026-04-26T00:00:00.000Z</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.7</priority>
  </url>
  <url>
    <loc>https://hackyjs.com/posts/2026-supply-chain-attacks-the-rise-of-ai-tool-compromises</loc>
    <lastmod>2026-04-25T00:00:00.000Z</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.7</priority>
  </url>
  <url>
    <loc>https://hackyjs.com/posts/a-practical-guide-to-a-50-line-deep-seek-agent-in-javascript</loc>
    <lastmod>2026-04-25T00:00:00.000Z</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.7</priority>
  </url>
  <url>
    <loc>https://hackyjs.com/posts/ai-powered-log-analysis-from-chaos-to-actionable-insights</loc>
    <lastmod>2026-04-25T00:00:00.000Z</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.7</priority>
  </url>
  <url>
    <loc>https://hackyjs.com/posts/auditing-ai-assisted-code-generation-for-security-flaws</loc>
    <lastmod>2026-04-25T00:00:00.000Z</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.7</priority>
  </url>
  <url>
    <loc>https://hackyjs.com/posts/auditing-ai-generated-pull-requests-for-security-debt</loc>
    <lastmod>2026-04-25T00:00:00.000Z</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.7</priority>
  </url>
  <url>
    <loc>https://hackyjs.com/posts/auditing-browser-game-memory-with-javascript-speed-hacks-and-score-manipulation</loc>
    <lastmod>2026-04-25T00:00:00.000Z</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.7</priority>
  </url>
  <url>
    <loc>https://hackyjs.com/posts/auditing-cli-ai-tools-for-unsafe-command-execution</loc>
    <lastmod>2026-04-25T00:00:00.000Z</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.7</priority>
  </url>
  <url>
    <loc>https://hackyjs.com/posts/auditing-copilot-refactors-for-dropped-security-middleware</loc>
    <lastmod>2026-04-25T00:00:00.000Z</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.7</priority>
  </url>
  <url>
    <loc>https://hackyjs.com/posts/auditing-csv-and-json-exports-for-sensitive-data</loc>
    <lastmod>2026-04-25T00:00:00.000Z</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.7</priority>
  </url>
  <url>
    <loc>https://hackyjs.com/posts/auditing-gpt-55-offline-mode-can-it-really-run-a-chatbot-without-the-cloud</loc>
    <lastmod>2026-04-25T00:00:00.000Z</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.7</priority>
  </url>
  <url>
    <loc>https://hackyjs.com/posts/auditing-llm-access-control-in-multi-tenant-applications</loc>
    <lastmod>2026-04-25T00:00:00.000Z</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.7</priority>
  </url>
  <url>
    <loc>https://hackyjs.com/posts/auditing-multi-tenant-workspace-invitations-for-access-control-bugs</loc>
    <lastmod>2026-04-25T00:00:00.000Z</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.7</priority>
  </url>
  <url>
    <loc>https://hackyjs.com/posts/auditing-upgrade-and-downgrade-flows-for-authorization-failures</loc>
    <lastmod>2026-04-25T00:00:00.000Z</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.7</priority>
  </url>
  <url>
    <loc>https://hackyjs.com/posts/auditing-your-logging-pipeline-for-incident-readiness</loc>
    <lastmod>2026-04-25T00:00:00.000Z</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.7</priority>
  </url>
  <url>
    <loc>https://hackyjs.com/posts/automating-cve-monitoring-with-a-custom-ai-agent</loc>
    <lastmod>2026-04-25T00:00:00.000Z</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.7</priority>
  </url>
  <url>
    <loc>https://hackyjs.com/posts/automating-prompt-injection-testing-with-fuzzing-tools</loc>
    <lastmod>2026-04-25T00:00:00.000Z</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.7</priority>
  </url>
  <url>
    <loc>https://hackyjs.com/posts/benchmarking-claude-5-and-deepseek-r1-on-code-generation-with-broken-specs</loc>
    <lastmod>2026-04-25T00:00:00.000Z</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.7</priority>
  </url>
  <url>
    <loc>https://hackyjs.com/posts/broken-access-control-the-most-common-yet-preventable-risk</loc>
    <lastmod>2026-04-25T00:00:00.000Z</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.7</priority>
  </url>
  <url>
    <loc>https://hackyjs.com/posts/broken-authentication-why-session-management-still-fails</loc>
    <lastmod>2026-04-25T00:00:00.000Z</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.7</priority>
  </url>
  <url>
    <loc>https://hackyjs.com/posts/building-a-browser-hacking-simulator-from-scratch-with-javascript</loc>
    <lastmod>2026-04-25T00:00:00.000Z</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.7</priority>
  </url>
  <url>
    <loc>https://hackyjs.com/posts/building-a-chatbot-that-answers-your-infrastructure-questions</loc>
    <lastmod>2026-04-25T00:00:00.000Z</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.7</priority>
  </url>
  <url>
    <loc>https://hackyjs.com/posts/building-a-client-side-prompt-injection-guard-in-javascript</loc>
    <lastmod>2026-04-25T00:00:00.000Z</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.7</priority>
  </url>
  <url>
    <loc>https://hackyjs.com/posts/building-a-prompt-firewall-filtering-user-inputs-with-deterministic-rules</loc>
    <lastmod>2026-04-25T00:00:00.000Z</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.7</priority>
  </url>
  <url>
    <loc>https://hackyjs.com/posts/capturing-and-analyzing-wifi-handshakes-with-nodejs</loc>
    <lastmod>2026-04-25T00:00:00.000Z</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.7</priority>
  </url>
  <url>
    <loc>https://hackyjs.com/posts/client-side-feature-flags-a-devtools-security-audit-walkthrough</loc>
    <lastmod>2026-04-25T00:00:00.000Z</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.7</priority>
  </url>
  <url>
    <loc>https://hackyjs.com/posts/compliance-as-code-evidence-should-be-generated-not-collected</loc>
    <lastmod>2026-04-25T00:00:00.000Z</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.7</priority>
  </url>
  <url>
    <loc>https://hackyjs.com/posts/cross-site-scripting-xss-types-vectors-and-mitigations</loc>
    <lastmod>2026-04-25T00:00:00.000Z</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.7</priority>
  </url>
  <url>
    <loc>https://hackyjs.com/posts/detecting-indicators-of-compromise-in-third-party-integrations</loc>
    <lastmod>2026-04-25T00:00:00.000Z</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.7</priority>
  </url>
  <url>
    <loc>https://hackyjs.com/posts/environment-variable-security-post-2026-why-sensitive-marking-matters</loc>
    <lastmod>2026-04-25T00:00:00.000Z</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.7</priority>
  </url>
  <url>
    <loc>https://hackyjs.com/posts/finding-authorization-gaps-in-llm-agent-tool-use</loc>
    <lastmod>2026-04-25T00:00:00.000Z</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.7</priority>
  </url>
  <url>
    <loc>https://hackyjs.com/posts/finding-insecure-patterns-copilot-generates-by-default</loc>
    <lastmod>2026-04-25T00:00:00.000Z</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.7</priority>
  </url>
  <url>
    <loc>https://hackyjs.com/posts/hardening-llm-agents-preventing-tool-abuse-via-prompt-injection</loc>
    <lastmod>2026-04-25T00:00:00.000Z</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.7</priority>
  </url>
  <url>
    <loc>https://hackyjs.com/posts/how-a-third-party-ai-tool-led-to-vercels-environment-variable-exposure</loc>
    <lastmod>2026-04-25T00:00:00.000Z</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.7</priority>
  </url>
  <url>
    <loc>https://hackyjs.com/posts/how-i-use-ai-to-automate-my-daily-code-reviews</loc>
    <lastmod>2026-04-25T00:00:00.000Z</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.7</priority>
  </url>
  <url>
    <loc>https://hackyjs.com/posts/how-to-build-a-reliable-research-agent-using-gemini-25-pro-function-calling</loc>
    <lastmod>2026-04-25T00:00:00.000Z</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.7</priority>
  </url>
  <url>
    <loc>https://hackyjs.com/posts/how-to-test-postmessage-listeners-for-trust-boundary-failures</loc>
    <lastmod>2026-04-25T00:00:00.000Z</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.7</priority>
  </url>
  <url>
    <loc>https://hackyjs.com/posts/how-to-verify-open-code-integrity-before-using-it-in-security-critical-apps</loc>
    <lastmod>2026-04-25T00:00:00.000Z</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.7</priority>
  </url>
  <url>
    <loc>https://hackyjs.com/posts/i-built-a-code-agent-with-deepseek-v4-handling-1m-token-context-in-practice</loc>
    <lastmod>2026-04-25T00:00:00.000Z</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.7</priority>
  </url>
  <url>
    <loc>https://hackyjs.com/posts/insecure-deserialization-the-risk-hidden-in-your-data-parsing</loc>
    <lastmod>2026-04-25T00:00:00.000Z</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.7</priority>
  </url>
  <url>
    <loc>https://hackyjs.com/posts/insufficient-logging-monitoring-the-missed-opportunity-for-detection</loc>
    <lastmod>2026-04-25T00:00:00.000Z</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.7</priority>
  </url>
  <url>
    <loc>https://hackyjs.com/posts/javascript-driven-referral-systems-engineering-viral-loops</loc>
    <lastmod>2026-04-25T00:00:00.000Z</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.7</priority>
  </url>
  <url>
    <loc>https://hackyjs.com/posts/owasp-top-10-a-developers-practical-guide-to-critical-risks</loc>
    <lastmod>2026-04-25T00:00:00.000Z</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.7</priority>
  </url>
  <url>
    <loc>https://hackyjs.com/posts/real-time-multilingual-chat-testing-gpt-6s-streaming-and-reasoning</loc>
    <lastmod>2026-04-25T00:00:00.000Z</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.7</priority>
  </url>
  <url>
    <loc>https://hackyjs.com/posts/replacing-reasoning-what-happens-when-you-trade-understanding-for-faster-ai-output</loc>
    <lastmod>2026-04-25T00:00:00.000Z</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.7</priority>
  </url>
  <url>
    <loc>https://hackyjs.com/posts/rotating-secrets-after-a-supply-chain-attack-a-practical-guide</loc>
    <lastmod>2026-04-25T00:00:00.000Z</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.7</priority>
  </url>
  <url>
    <loc>https://hackyjs.com/posts/security-answer-autopsy-what-buyers-notice-when-youre-vague</loc>
    <lastmod>2026-04-25T00:00:00.000Z</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.7</priority>
  </url>
  <url>
    <loc>https://hackyjs.com/posts/security-misconfiguration-how-default-settings-enable-attacks</loc>
    <lastmod>2026-04-25T00:00:00.000Z</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.7</priority>
  </url>
  <url>
    <loc>https://hackyjs.com/posts/server-side-request-forgery-ssrf-exploiting-trust-in-internal-networks</loc>
    <lastmod>2026-04-25T00:00:00.000Z</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.7</priority>
  </url>
  <url>
    <loc>https://hackyjs.com/posts/testing-five-classic-javascript-weaknesses-in-modern-single-page-apps</loc>
    <lastmod>2026-04-25T00:00:00.000Z</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.7</priority>
  </url>
  <url>
    <loc>https://hackyjs.com/posts/testing-tenant-isolation-in-ai-apis-with-burp-and-javascript</loc>
    <lastmod>2026-04-25T00:00:00.000Z</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.7</priority>
  </url>
  <url>
    <loc>https://hackyjs.com/posts/testing-third-party-oauth-trust-what-the-vercel-incident-teaches-about-ai-saas-integrations</loc>
    <lastmod>2026-04-25T00:00:00.000Z</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.7</priority>
  </url>
  <url>
    <loc>https://hackyjs.com/posts/the-anatomy-of-a-prompt-injection-attack-from-leaks-to-remote-control</loc>
    <lastmod>2026-04-25T00:00:00.000Z</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.7</priority>
  </url>
  <url>
    <loc>https://hackyjs.com/posts/the-developer-as-hacker-creative-techniques-for-real-world-code-challenges</loc>
    <lastmod>2026-04-25T00:00:00.000Z</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.7</priority>
  </url>
  <url>
    <loc>https://hackyjs.com/posts/the-engineering-principles-behind-reliable-audit-trails</loc>
    <lastmod>2026-04-25T00:00:00.000Z</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.7</priority>
  </url>
  <url>
    <loc>https://hackyjs.com/posts/the-forgotten-attack-surface-long-term-memory-in-llm-applications</loc>
    <lastmod>2026-04-25T00:00:00.000Z</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.7</priority>
  </url>
  <url>
    <loc>https://hackyjs.com/posts/the-ownership-gap-how-saas-growth-erodes-security-accountability</loc>
    <lastmod>2026-04-25T00:00:00.000Z</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.7</priority>
  </url>
  <url>
    <loc>https://hackyjs.com/posts/understanding-injection-flaws-sql-nosql-and-beyond</loc>
    <lastmod>2026-04-25T00:00:00.000Z</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.7</priority>
  </url>
  <url>
    <loc>https://hackyjs.com/posts/using-components-with-known-vulnerabilities-a-supply-chain-blind-spot</loc>
    <lastmod>2026-04-25T00:00:00.000Z</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.7</priority>
  </url>
  <url>
    <loc>https://hackyjs.com/posts/using-local-llms-to-detect-secrets-in-commit-messages-before-push</loc>
    <lastmod>2026-04-25T00:00:00.000Z</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.7</priority>
  </url>
  <url>
    <loc>https://hackyjs.com/posts/using-service-workers-to-audit-referral-token-lifecycles</loc>
    <lastmod>2026-04-25T00:00:00.000Z</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.7</priority>
  </url>
  <url>
    <loc>https://hackyjs.com/posts/zero-trust-for-ai-architecting-llm-pipelines-that-distrust-every-input</loc>
    <lastmod>2026-04-25T00:00:00.000Z</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.7</priority>
  </url>
  <url>
    <loc>https://hackyjs.com/posts/a-framework-for-threat-modeling-ai-augmented-development-pipelines</loc>
    <lastmod>2026-04-22T00:00:00.000Z</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.7</priority>
  </url>
  <url>
    <loc>https://hackyjs.com/posts/building-security-features-that-customers-will-pay-for</loc>
    <lastmod>2026-04-22T00:00:00.000Z</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.7</priority>
  </url>
  <url>
    <loc>https://hackyjs.com/posts/creating-a-secure-golden-path-for-ai-assisted-development</loc>
    <lastmod>2026-04-22T00:00:00.000Z</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.7</priority>
  </url>
  <url>
    <loc>https://hackyjs.com/posts/from-vibe-to-verified-enforcing-security-gates-in-ai-assisted-development</loc>
    <lastmod>2026-04-22T00:00:00.000Z</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.7</priority>
  </url>
  <url>
    <loc>https://hackyjs.com/posts/how-security-certifications-soc-2-iso-27001-unlock-new-markets-and-revenue</loc>
    <lastmod>2026-04-22T00:00:00.000Z</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.7</priority>
  </url>
  <url>
    <loc>https://hackyjs.com/posts/integrating-security-metrics-into-saas-unit-economics</loc>
    <lastmod>2026-04-22T00:00:00.000Z</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.7</priority>
  </url>
  <url>
    <loc>https://hackyjs.com/posts/integrating-security-scanners-into-your-ai-coding-workflow</loc>
    <lastmod>2026-04-22T00:00:00.000Z</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.7</priority>
  </url>
  <url>
    <loc>https://hackyjs.com/posts/managing-secrets-and-sensitive-data-when-using-ai-coding-tools</loc>
    <lastmod>2026-04-22T00:00:00.000Z</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.7</priority>
  </url>
  <url>
    <loc>https://hackyjs.com/posts/mitigating-dependency-bloat-and-vulnerability-introduced-by-ai-coders</loc>
    <lastmod>2026-04-22T00:00:00.000Z</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.7</priority>
  </url>
  <url>
    <loc>https://hackyjs.com/posts/preventing-churn-how-security-incidents-directly-impact-saas-revenue</loc>
    <lastmod>2026-04-22T00:00:00.000Z</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.7</priority>
  </url>
  <url>
    <loc>https://hackyjs.com/posts/prompt-engineering-for-security-writing-safer-ai-code-requests</loc>
    <lastmod>2026-04-22T00:00:00.000Z</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.7</priority>
  </url>
  <url>
    <loc>https://hackyjs.com/posts/quantifying-securitys-impact-on-saas-customer-lifetime-value</loc>
    <lastmod>2026-04-22T00:00:00.000Z</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.7</priority>
  </url>
  <url>
    <loc>https://hackyjs.com/posts/red-teaming-your-ai-coding-assistant-finding-and-fixing-weak-prompts</loc>
    <lastmod>2026-04-22T00:00:00.000Z</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.7</priority>
  </url>
  <url>
    <loc>https://hackyjs.com/posts/securing-ai-generated-code-a-practical-audit-checklist</loc>
    <lastmod>2026-04-22T00:00:00.000Z</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.7</priority>
  </url>
  <url>
    <loc>https://hackyjs.com/posts/security-as-a-sales-enablement-tool-for-enterprise-deals</loc>
    <lastmod>2026-04-22T00:00:00.000Z</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.7</priority>
  </url>
  <url>
    <loc>https://hackyjs.com/posts/security-considerations-for-ai-generated-infrastructure-as-code-iac</loc>
    <lastmod>2026-04-22T00:00:00.000Z</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.7</priority>
  </url>
  <url>
    <loc>https://hackyjs.com/posts/the-financial-impact-of-a-security-breach-on-saas-valuation-and-growth</loc>
    <lastmod>2026-04-22T00:00:00.000Z</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.7</priority>
  </url>
  <url>
    <loc>https://hackyjs.com/posts/the-security-moat-how-robust-practices-become-a-competitive-advantage</loc>
    <lastmod>2026-04-22T00:00:00.000Z</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.7</priority>
  </url>
  <url>
    <loc>https://hackyjs.com/posts/turning-security-compliance-from-a-burden-into-a-revenue-stream</loc>
    <lastmod>2026-04-22T00:00:00.000Z</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.7</priority>
  </url>
  <url>
    <loc>https://hackyjs.com/posts/using-security-posture-to-justify-premium-pricing-tiers</loc>
    <lastmod>2026-04-22T00:00:00.000Z</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.7</priority>
  </url>
  <url>
    <loc>https://hackyjs.com/posts/ai-browser-prompt-injection-red-teaming</loc>
    <lastmod>2026-04-19T00:00:00.000Z</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.7</priority>
  </url>
  <url>
    <loc>https://hackyjs.com/posts/ai-data-leak-testing-javascript</loc>
    <lastmod>2026-04-19T00:00:00.000Z</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.7</priority>
  </url>
  <url>
    <loc>https://hackyjs.com/posts/i-let-ai-agents-audit-my-code</loc>
    <lastmod>2026-04-19T00:00:00.000Z</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.7</priority>
  </url>
  <url>
    <loc>https://hackyjs.com/posts/mcp-security-javascript-audit</loc>
    <lastmod>2026-04-19T00:00:00.000Z</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.7</priority>
  </url>
  <url>
    <loc>https://hackyjs.com/posts/soc2-iso27001-importance</loc>
    <lastmod>2026-04-19T00:00:00.000Z</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.7</priority>
  </url>
  <url>
    <loc>https://hackyjs.com/posts/the-secops-gaps-i-keep-seeing-in-growing-saas-companies</loc>
    <lastmod>2026-04-19T00:00:00.000Z</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.7</priority>
  </url>
  <url>
    <loc>https://hackyjs.com/posts/what-an-insecure-ai-integration-usually-looks-like-in-a-saas-app</loc>
    <lastmod>2026-04-19T00:00:00.000Z</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.7</priority>
  </url>
  <url>
    <loc>https://hackyjs.com/posts/why-backend-must-recheck-everything</loc>
    <lastmod>2026-04-19T00:00:00.000Z</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.7</priority>
  </url>
  <url>
    <loc>https://hackyjs.com/posts/spa-weakness</loc>
    <lastmod>2025-08-01T00:00:00.000Z</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://hackyjs.com/posts/security-in-times-of-ai</loc>
    <lastmod>2025-05-17T00:00:00.000Z</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.5</priority>
  </url>
  <url>
    <loc>https://hackyjs.com/posts/why-to-learn-js</loc>
    <lastmod>2025-05-17T00:00:00.000Z</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.5</priority>
  </url>
  <url>
    <loc>https://hackyjs.com/posts/hello-world</loc>
    <lastmod>2025-05-16T00:00:00.000Z</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.5</priority>
  </url>
  <url>
    <loc>https://hackyjs.com/videos/32</loc>
    <lastmod>2025-07-04T21:25:44.219Z</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://hackyjs.com/videos/31</loc>
    <lastmod>2025-07-04T21:25:44.214Z</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://hackyjs.com/videos/30</loc>
    <lastmod>2025-07-04T21:25:44.209Z</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://hackyjs.com/videos/29</loc>
    <lastmod>2025-07-04T21:25:44.204Z</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://hackyjs.com/videos/28</loc>
    <lastmod>2025-07-04T21:25:44.198Z</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://hackyjs.com/videos/27</loc>
    <lastmod>2025-07-04T21:25:44.192Z</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://hackyjs.com/videos/26</loc>
    <lastmod>2025-07-04T21:25:44.187Z</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://hackyjs.com/videos/25</loc>
    <lastmod>2025-07-04T21:25:44.182Z</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://hackyjs.com/videos/24</loc>
    <lastmod>2025-07-04T21:25:44.176Z</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://hackyjs.com/videos/23</loc>
    <lastmod>2025-07-04T21:25:44.171Z</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://hackyjs.com/videos/22</loc>
    <lastmod>2025-07-04T21:25:44.165Z</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://hackyjs.com/videos/21</loc>
    <lastmod>2025-07-04T21:25:44.159Z</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://hackyjs.com/videos/20</loc>
    <lastmod>2025-07-04T21:25:44.154Z</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://hackyjs.com/videos/19</loc>
    <lastmod>2025-07-04T21:25:44.148Z</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://hackyjs.com/videos/18</loc>
    <lastmod>2025-07-04T21:25:44.142Z</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://hackyjs.com/videos/17</loc>
    <lastmod>2025-07-04T21:25:44.137Z</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://hackyjs.com/videos/16</loc>
    <lastmod>2025-07-04T21:25:44.133Z</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://hackyjs.com/videos/15</loc>
    <lastmod>2025-07-04T21:25:44.127Z</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://hackyjs.com/videos/14</loc>
    <lastmod>2025-07-04T21:25:44.122Z</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://hackyjs.com/videos/13</loc>
    <lastmod>2025-07-04T21:25:44.116Z</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://hackyjs.com/videos/12</loc>
    <lastmod>2025-07-04T21:25:44.107Z</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://hackyjs.com/videos/11</loc>
    <lastmod>2025-07-04T21:25:44.101Z</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://hackyjs.com/videos/10</loc>
    <lastmod>2025-07-04T21:25:44.094Z</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://hackyjs.com/videos/9</loc>
    <lastmod>2025-07-04T21:25:44.089Z</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://hackyjs.com/videos/8</loc>
    <lastmod>2025-07-04T21:25:44.083Z</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://hackyjs.com/videos/7</loc>
    <lastmod>2025-07-04T21:25:44.078Z</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://hackyjs.com/videos/6</loc>
    <lastmod>2025-07-04T21:25:44.074Z</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://hackyjs.com/videos/5</loc>
    <lastmod>2025-07-04T21:25:44.069Z</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://hackyjs.com/videos/4</loc>
    <lastmod>2025-07-04T21:25:44.065Z</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://hackyjs.com/videos/3</loc>
    <lastmod>2025-07-04T21:25:44.060Z</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://hackyjs.com/videos/2</loc>
    <lastmod>2025-07-04T21:25:44.053Z</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://hackyjs.com/videos/1</loc>
    <lastmod>2025-07-04T21:23:02.717Z</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.6</priority>
  </url>
</urlset>
