DigiNews

Summary

The GitHub commit d821685 for the zod project references a potentially infected release of 4.6.6. The diff reveals suspicious changes, including a preinstall script and a meta.test.mjs file that appears designed to fetch and execute remote payloads, signaling a possible supply-chain compromise.