Monday, October 12, 2026 · 2 of 4

1. Zod 4.6.6 commit adds an install-time hook that downloads remote code; whether it reached npm is unconfirmed

   Oct 11–12SecurityOpen Source