Finds where untrusted keys such as __proto__, constructor or prototype reach a deep merge, a path write or a parser in Node.js and TypeScript code. Returns each pollution path, the property a later read would see, the gadget that uses it and the guard to add.