echo094 / decode-js

JS混淆代码的AST分析工具 AST analysis tool for obfuscated JS code
MIT License
548 stars 295 forks source link

chore: migrate vm2 to isolated-vm #85

Closed echo094 closed 3 months ago

echo094 commented 3 months ago

The maintenance of vm2 has been discontinued due to critical security issues (patriksimek/vm2#533), and isolated-vm is suggested as replacement.

Quoted from the requirements of isolated-vm:

This project requires nodejs version 16.x (or later).

🚨 If you are using a version of nodejs 20.x or later, you must pass --no-node-snapshot to node.

Furthermore, to install this module you will need a compiler installed. If you run into errors while running npm install isolated-vm it is likely you don't have a compiler set up, or your compiler is too old.

mgttt commented 3 months ago

https://github.com/patriksimek/vm2/issues/533#issuecomment-2027887015