It's not even really 'using Calendly', it's just 'being tricked into running malicious code', as in there's no exploit as such here, it's just social engineerin

It's not even really 'using Calendly', it's just 'being tricked into running malicious code', as in there's no exploit as such here, it's just social engineering to get the user to run a supplied script.