Node.js applications open to prototype pollution attacks via legacy function in popular encryption library