Pack requires old version of puppeteer which requires polyfill. Polyfill domain has been bought by chinese adware company.

Polyfill.io has recently been bought by a Chinese adware company (source https://sansec.io/research/polyfill-supply-chain-attack)
So for security reasons all packages requiring polyfill need to be updated, in this package that would be puppeteer.