How can it reach localhost or is this only a placeholder for a real address?

The code in the github repo has some errors to prevent script kiddies from directly copy/pasting it.

Obviously the proof-of-concept shared with OpenAI/BugCrowd didn't have such errors.