I didn’t realize the browser could exfiltrate files like this. Or is this intended to be run via Node?
Yes, as can be seen in the single line in the linked readme.
`node main.js` for a 1/6 chance of posting your SSH private key on pastebin :)
The question might be honest, but I don't think it adds much to the discussion.