js scripts running on frameworks running inside containers
PS so I see the host ended up staying uncompromised