Prototype pollution vulnerability in stealjs steal 2.2.4 via the alias variable in babel.js.
The prototype pollution vulnerability can be mitigated with several best practices described here: https://learn.snyk.io/lessons/prototype-pollution/javascript/