Advisories for Npm/Mootools package

The mootools package is vulnerable to Prototype Pollution, due to the ability to pass untrusted input to Object.merge()