How one developer just broke Node, Babel and thousands of projects in 11 lines of JavaScript