Service denial via prototype-path method names

Prototype pollution in web3-core-method 1.10.4 and earlier allows remote attackers to interrupt dependent Node.js services. attachToObject processes a crafted method name such as proto.polluted without blocking prototype-path keys, so initialization writes an attacker-selected property to Object.prototype. Exploitation requires a dependent application to pass attacker-controlled method initialization data; the demonstrated result is global prototype modification, while the published bounded impact is service denial.