Prototype pollution vulnerability in stealjs steal 2.2.4 via the alias variable in babel.js.
stealjs steal 2.2.4