Steam can be relaunched as a debuggable Chromium app
Launching Steam with Chromium debugging enabled allows JavaScript injection through the webSocketDebuggingUrl interface
I learned quite a bit from this actually. I didn't know Steam was a Chromium app. Hence, you can kill Steam then relaunch it with the "-cef-enable-debugging" flag. Once you'll launched Steam with this, you can inject Javascript into Steam