Do not install Zod 4.6.6 – version may be infected, warns HN thread
luggage_bazooka · hn · 2026-10-12
A Hacker News thread warns developers not to install Zod 4.6.6, as the release may be infected (suspected supply-chain compromise). The poster links to a commit (d821685) in the zod repo as evidence. Zod is one of the most widely used TypeScript schema validation libraries, so users should hold off upgrading until the situation is confirmed.
More from coding & agent
- VoiceStudio hits 59K stars: 10 exploding GitHub repos, from no-code to technical — PrajwalTomar_ · 2026-10-12
- 3,300+ open-source AI agent tools in one auto-updating, categorized list — Strict-Quarter7214 · 2026-10-12
- yoagent: a Rust agent runtime that reuses pi extensions and DeepSeek Harness plugins — liyuanhao · 2026-10-12
- xses: a unified CLI to sync and resume AI coding agent sessions across 5 tools — Choice_Concern_5387 · 2026-10-12
- 15 role-based prompts claim to replace a $114,500 ML education, from theory to MLOps — bigaiguy · 2026-10-12
- Use small models for grunt work, save SOTA for orchestration, says agentic engineering practitioner — petergyang · 2026-10-12