`@babel/plugin-transform-modules-systemjs` generates arbitrary code when compiling malicious input

[g1rly-c0d3r]

@babel/plugin-preset-env pulls in @babel/plugin-transform-modules-systemjs as a transitive dependency, which can generate code that can execute arbitrary code (i.e. eval(/*user input here*/)).

https://github.com/specify/specify7/security/dependabot/231