playwright

The run.js file acts as a universal executor that can run attacker-supplied JavaScript supplied via CLI arguments, file input, or stdin by writing the code to disk and requiring it. If Playwright is not present, it can perform runtime npm/npx installations and incorporates environment-derived headers in the generated wrapper path, enabling arbitrary code execution and increasing supply-chain/network exposure.