Unclaimed NPM package lead attacker to execute Remote code

The researcher has identified that https://github.com/mendixlabs/ChartJS/blob/master/package.json and https://github.com/mendixlabs/Leaflet/blob/master/package.json have widget-base-helpers as dependency which was unclaimed.
This package is now owned by the researcher.