- install JS libraries you want to test:
$ npm init -y
$ npm install json5 lodash
- run
./find-pollution.sh
with those libraries as arguments:
$ ./find-pollution.sh [library_name...]
Based on prototype-pollution-nsec18 repo.
This check is not 100 % correct, but it's a good enough heuristic.