refactor: switch back to vm2

.github/workflows/test.yml

@@ -18,15 +18,7 @@ jobs:
           node-version: '18.x'
           cache: 'npm'
 
-      - name: Cache node modules
-        id: nodemodules-cache
-        uses: actions/cache@v3
-        with:
-          path: node_modules
-          key: ${{ runner.os }}-node_modules-${{ hashFiles('**/package-lock.json') }}
-
       - name: Install dependencies
-        if: steps.nodemodules-cache.outputs.cache-hit != 'true'
         run: npm ci
 
       - name: Run tests

package.json

@@ -48,7 +48,7 @@
     "@babel/types": "^7.21.4",
     "@codemod/matchers": "^1.7.0",
     "commander": "^10.0.0",
-    "isolated-vm": "^4.5.0"
+    "vm2": "^3.9.19"
   },
   "devDependencies": {
     "@types/babel__generator": "^7.6.4",

src/deobfuscator/vm.ts

@@ -9,16 +9,14 @@ export type Sandbox = (code: string) => Promise<unknown>;
 
 export function createNodeSandbox(): (code: string) => Promise<unknown> {
   return async (code: string) => {
-    const {
-      default: { Isolate },
-    } = await import('isolated-vm');
-    const isolate = new Isolate();
-    const context = await isolate.createContext();
-    return (await context.eval(code, {
-      timeout: 10_000,
-      copy: true,
-      filename: 'file:///obfuscated.js',
-    })) as unknown;
+    const { VM } = await import('vm2');
+    const vm = new VM({
+      timeout: 30_000,
+      allowAsync: false,
+      eval: false,
+      wasm: false,
+    });
+    return vm.run(code) as unknown;
   };
 }
 

vitest.config.ts

@@ -4,6 +4,5 @@ export default defineConfig({
   test: {
     forceRerunTriggers: ['**/samples/**'],
     setupFiles: 'test/setup.ts',
-    threads: false, // https://github.com/laverdet/isolated-vm/issues/138
   },
 });