{"slug": "isolated-vm", "name": "isolated-vm", "category": "security", "category_name": "Security and passwords", "description": "", "recommenders": 3, "commenters": 3, "warners": 0, "score": 2.475, "rising": -0.98, "first": "2025-12-22", "latest": "2026-01-05", "why": "Not a silver bullet, but did you look into isolated-vm? https://github.com/laverdet/isolated-vm", "why_is_quote": true, "has_verdict": false, "sentiment": {"recommend": 3, "neutral": 0, "compare": 0, "warn": 0}, "spark": [0, 1, 2, 0, 0, 0, 0, 0, 0, 0, 0, 0], "listed": true, "loved": [], "caveat": "", "short_quote": "Not a silver bullet, but did you look into isolated-vm? https://github.com/laverdet/isolated-vm", "kind": "", "icon": false, "domain": null, "github_repo": "github.com/laverdet/isolated-vm", "official_url": "https://github.com/laverdet/isolated-vm", "pricing": "", "aliases": ["isolated-vm"], "verdict": null, "praise": [{"label": "", "summary": "", "quotes": [{"id": 744093632, "item_id": 46505852, "url": "https://news.ycombinator.com/item?id=46505852", "by": "15155", "date": "2026-01-05", "version": null, "stance": "recommend", "quote": "https://github.com/laverdet/isolated-vm", "excerpt": "https://github.com/laverdet/isolated-vm https://github.com/fulcrumapp/v8-sandbox But yeah, interesting, it might not exist.", "context": "", "use_case": "", "switched_from": "", "story": "JavaScript engines zoo \u2013 Compare every JavaScript engine"}, {"id": 743845152, "item_id": 46490322, "url": "https://news.ycombinator.com/item?id=46490322", "by": "HatchedLake721", "date": "2026-01-04", "version": null, "stance": "recommend", "quote": "Not a silver bullet, but did you look into isolated-vm? https://github.com/laverdet/isolated-vm", "excerpt": "Not a silver bullet, but did you look into isolated-vm? https://github.com/laverdet/isolated-vm But generally, I think best bet is to offload such things to e.g. Lambda per tenant.", "context": "", "use_case": "sandboxed JavaScript execution", "switched_from": "", "story": "JavaScript engines zoo \u2013 Compare every JavaScript engine"}, {"id": 741805024, "item_id": 46362814, "url": "https://news.ycombinator.com/item?id=46362814", "by": "paul_h", "date": "2025-12-22", "version": null, "stance": "recommend", "quote": "isolated-vm (https://www.npmjs.com/package/isolated-vm) here we come for increased sandboxing of node bits and pieces?", "excerpt": "isolated-vm (https://www.npmjs.com/package/isolated-vm) here we come for increased sandboxing of node bits and pieces? And we are a year after Java took out the security manager that could sandbox jars in separate classloaders - a standout feature since 1995.", "context": "", "use_case": "Sandboxing Node code", "switched_from": "", "story": "Lotusbail npm package found to be harvesting WhatsApp messages and contacts"}]}], "caveats": [], "who": [], "tags": [], "use_cases": ["sandboxed javascript execution", "sandboxing node code"], "compared": [], "makers": [], "threads": [{"url": "https://news.ycombinator.com/item?id=46486978", "title": "JavaScript engines zoo \u2013 Compare every JavaScript engine", "mentions": 2}, {"url": "https://news.ycombinator.com/item?id=46359996", "title": "Lotusbail npm package found to be harvesting WhatsApp messages and contacts", "mentions": 1}], "sentiment_by_month": {"2025-11": {}, "2025-12": {"recommend": 1}, "2026-01": {"recommend": 2}, "2026-02": {}, "2026-03": {}, "2026-04": {}, "2026-05": {}, "2026-06": {}, "2026-07": {}, "2026-08": {}, "2026-09": {}, "2026-10": {}}, "versions": [], "version_unnamed": 0, "family_ref": null, "runs_on": null, "lines": [], "quotes": [{"id": 744093632, "item_id": 46505852, "url": "https://news.ycombinator.com/item?id=46505852", "by": "15155", "date": "2026-01-05", "version": null, "stance": "recommend", "quote": "https://github.com/laverdet/isolated-vm", "excerpt": "https://github.com/laverdet/isolated-vm https://github.com/fulcrumapp/v8-sandbox But yeah, interesting, it might not exist.", "context": "", "use_case": "", "switched_from": "", "story": "JavaScript engines zoo \u2013 Compare every JavaScript engine"}, {"id": 743845152, "item_id": 46490322, "url": "https://news.ycombinator.com/item?id=46490322", "by": "HatchedLake721", "date": "2026-01-04", "version": null, "stance": "recommend", "quote": "Not a silver bullet, but did you look into isolated-vm? https://github.com/laverdet/isolated-vm", "excerpt": "Not a silver bullet, but did you look into isolated-vm? https://github.com/laverdet/isolated-vm But generally, I think best bet is to offload such things to e.g. Lambda per tenant.", "context": "", "use_case": "sandboxed JavaScript execution", "switched_from": "", "story": "JavaScript engines zoo \u2013 Compare every JavaScript engine"}, {"id": 741805024, "item_id": 46362814, "url": "https://news.ycombinator.com/item?id=46362814", "by": "paul_h", "date": "2025-12-22", "version": null, "stance": "recommend", "quote": "isolated-vm (https://www.npmjs.com/package/isolated-vm) here we come for increased sandboxing of node bits and pieces?", "excerpt": "isolated-vm (https://www.npmjs.com/package/isolated-vm) here we come for increased sandboxing of node bits and pieces? And we are a year after Java took out the security manager that could sandbox jars in separate classloaders - a standout feature since 1995.", "context": "", "use_case": "Sandboxing Node code", "switched_from": "", "story": "Lotusbail npm package found to be harvesting WhatsApp messages and contacts"}]}