In JetBrains WebStorm before 2024.3 code execution in Untrusted Project mode was possible via type definitions installer script
CWE-349, NVD-CWE-noinfo