diff --git a/fixtures/packaging/systemjs-builder/dev/.snyk b/fixtures/packaging/systemjs-builder/dev/.snyk
new file mode 100644
index 000000000000..c49355f83853
--- /dev/null
+++ b/fixtures/packaging/systemjs-builder/dev/.snyk
@@ -0,0 +1,34 @@
+# Snyk (https://snyk.io) policy file, patches or ignores known vulnerabilities.
+version: v1.25.1
+ignore: {}
+# patches apply the minimum changes required to fix a vulnerability
+patch:
+  SNYK-JS-LODASH-567746:
+    - systemjs-builder > babel-core > lodash:
+        patched: '2024-07-13T20:05:46.348Z'
+        id: SNYK-JS-LODASH-567746
+        path: systemjs-builder > babel-core > lodash
+    - systemjs-builder > babel-core > babel-generator > lodash:
+        patched: '2024-07-13T20:05:46.348Z'
+        id: SNYK-JS-LODASH-567746
+        path: systemjs-builder > babel-core > babel-generator > lodash
+    - systemjs-builder > babel-core > babel-register > lodash:
+        patched: '2024-07-13T20:05:46.348Z'
+        id: SNYK-JS-LODASH-567746
+        path: systemjs-builder > babel-core > babel-register > lodash
+    - systemjs-builder > babel-core > babel-generator > babel-types > lodash:
+        patched: '2024-07-13T20:05:46.348Z'
+        id: SNYK-JS-LODASH-567746
+        path: systemjs-builder > babel-core > babel-generator > babel-types > lodash
+    - systemjs-builder > babel-core > babel-helpers > babel-template > lodash:
+        patched: '2024-07-13T20:05:46.348Z'
+        id: SNYK-JS-LODASH-567746
+        path: >-
+          systemjs-builder > babel-core > babel-helpers > babel-template >
+          lodash
+    - systemjs-builder > babel-core > babel-helpers > babel-template > babel-traverse > lodash:
+        patched: '2024-07-13T20:05:46.348Z'
+        id: SNYK-JS-LODASH-567746
+        path: >-
+          systemjs-builder > babel-core > babel-helpers > babel-template >
+          babel-traverse > lodash
diff --git a/fixtures/packaging/systemjs-builder/dev/package.json b/fixtures/packaging/systemjs-builder/dev/package.json
index db6eb9a56c58..521b3b698758 100644
--- a/fixtures/packaging/systemjs-builder/dev/package.json
+++ b/fixtures/packaging/systemjs-builder/dev/package.json
@@ -2,9 +2,13 @@
   "private": true,
   "name": "systemjs-dev-fixture",
   "dependencies": {
-    "systemjs-builder": "^0.15.34"
+    "systemjs-builder": "^0.15.34",
+    "@snyk/protect": "latest"
   },
   "scripts": {
-    "build": "rm -f output.js && node build.js"
-  }
+    "build": "rm -f output.js && node build.js",
+    "prepare": "yarn run snyk-protect",
+    "snyk-protect": "snyk-protect"
+  },
+  "snyk": true
 }
diff --git a/fixtures/packaging/systemjs-builder/dev/yarn.lock b/fixtures/packaging/systemjs-builder/dev/yarn.lock
index 9dd2fdb3736e..a15ce127e026 100644
--- a/fixtures/packaging/systemjs-builder/dev/yarn.lock
+++ b/fixtures/packaging/systemjs-builder/dev/yarn.lock
@@ -2,6 +2,11 @@
 # yarn lockfile v1
 
 
+"@snyk/protect@^1.1292.1":
+  version "1.1292.1"
+  resolved "https://registry.yarnpkg.com/@snyk/protect/-/protect-1.1292.1.tgz#fe67905a5681828ac315b03e366427405e762157"
+  integrity sha512-wM/0JGs1PhN30nigmOSfEPge3pyEHBAEN3/5/EoyIPOsUsZl/pKBEb2TwZnYbnfTKQi7CpyOKkVIaw40CBbQVA==
+
 align-text@^0.1.1, align-text@^0.1.3:
   version "0.1.4"
   resolved "https://registry.yarnpkg.com/align-text/-/align-text-0.1.4.tgz#0cd90a561093f35d0a99256c22b7069433fad117"