Node.js is still required to easily get your files https://textboard.org/prog/422 overwritten by malware.
That's a great way to discourage the use of JavaScript. Lispers should launch more of such attacks on the JavaScript ecosystem, as retaliation for the publication of the heretical JSICP.