This is a 0 day for anything that uses V8 to execute possibly-malicious JavaScript.

Node.js and Electron aren't designed to do that in the first place, so this doesn't really affect them.

Unless some protestware decides to delete all your data and replace everything with "icri4ukraine".

That's the thing... It can already do that without a V8 vulnerability.