# Zod commit adds remote code loader to 4.6.6 package files

_Published Monday, October 12, 2026 at 5:18 AM EDT · Security · Latest · Tier 2 — Notable_

![Zod commit adds remote code loader to 4.6.6 package files — Primary](https://opengraph.githubassets.com/f8ad7d63c7a1406cfc8e44744b4c47f2cbdbfec14911579af6e780edb3baf0d5/colinhacks/zod/commit/d821685ea6732436fcdf786a81d076958471e467)

A GitHub commit in colinhacks/zod adds a remote code loader to the zod and @zod/mini package files while changing their versions from 4.6.5 to 4.6.6. The added JavaScript queries an Ethereum contract for addresses, downloads a payload and imports remotely supplied setup code.

The commit includes the loader in both packages' file lists and adds top-level preinstall entries pointing to it. Those entries are outside a scripts object, so they do not establish automatic execution during installation. The release workflow also gains a trigger for package-file changes pushed to main.

## Sources

- [github.com](https://github.com/colinhacks/zod/commit/d821685ea6732436fcdf786a81d076958471e467)

---
Canonical: https://techandbusiness.org/newswire/mwCXdUh4C1qypCgNYBHZlS
Published: 2026-10-12T09:18:52.700Z
Story chronology: 2026-10-12T07:47:29.000Z
Retrieved: 2026-10-12T11:35:49.225Z
Publisher: Tech & Business (techandbusiness.org)