Yhn first seen 18 h ago, last 18 h ago, peak #22
Warning issued over potentially infected Zod 4.6.6 release
Original: Do not install Zod 4.6.6 – might be infected
Developers are being warned not to install version 4.6.6 of Zod, the widely used TypeScript schema validation library, amid concerns the release may be compromised. The alert points to a commit in the project's GitHub repository, and the news spread quickly through the developer community, with engineers urging others to hold off updating until the maintainers confirm the package is safe.
Why now: A possible supply-chain compromise of a hugely popular open-source dependency puts countless projects at risk, so developers are rushing to warn each other.
Evidence
- Do not install Zod 4.6.6 – might be infected · luggage_bazooka · 46
API: https://socialmediatrends-api.osmike.com/v1/trends/1961424