It's Macro-enabled Office files all over again.
autorun.inf
Next up: Javascript virtual operating systems.
That's essentially what WASM does, no?
we need to go deeper