Demonstration of _.merge prototype pollution vulnerability - View it on GitHub