Lottie Player NPM package compromised
snyk.io