Unclaimed NPM package lead attacker to execute Remote code

[infosec2023]

The researcher has identified that https://github.com/mendixlabs/ChartJS/blob/master/package.json and https://github.com/mendixlabs/Leaflet/blob/master/package.json have widget-base-helpers as dependency which was unclaimed.
This package is now owned by the researcher.