Potential fix for code scanning alert no. 55: Prototype-polluting assignment

Co-authored-by: Copilot Autofix powered by AI <62310815+github-advanced-security[bot]@users.noreply.github.com>

Author: ardatan

packages/wrap/src/transforms/WrapQuery.ts

@@ -87,11 +87,18 @@ export default class WrapQuery<TContext = Record<string, any>>
       const path = [...this.path];
       while (path.length > 1) {
         const next = path.shift()!;
+        if (next === '__proto__' || next === 'constructor' || next === 'prototype') {
+          throw new Error('Invalid path key');
+        }
         if (data[next]) {
           data = data[next];
         }
       }
-      data[path[0]!] = this.extractor(data[path[0]!]);
+      const lastKey = path[0]!;
+      if (lastKey === '__proto__' || lastKey === 'constructor' || lastKey === 'prototype') {
+        throw new Error('Invalid path key');
+      }
+      data[lastKey] = this.extractor(data[lastKey]);
     }
 
     return {