Properly detect eval("require") as require

https://unpkg.com/file-type@16.5.4/core.js

We should detect the following code as an unsafe-import (but still detect the usage of the `stream` core module)

```js
// Using `eval` to work around issues when bundling with Webpack
const stream = eval('require')('stream'); // eslint-disable-line no-eval
```