VM Module in Node.js

Last Updated : 11 Mar, 2026

The VM module in Node.js allows JavaScript code to run in a separate and isolated environment. It is useful for executing code securely without affecting the main application.

  • Enables execution of JavaScript in a sandboxed environment.
  • Each virtual machine has its own global objects and variables.
  • Helps run untrusted code safely without impacting the main program.

Importing the Module

To use the VM module in your application, simply import it as given below:

const vm = require('vm');

Features

The VM module provides several capabilities that enable secure, efficient, and controlled execution of JavaScript code in an isolated environment.

  • Script Caching: The module supports caching scripts, which can enhance performance when running the same code multiple times.
  • Error Handling: Provides strong error handling, making it easier to manage and debug errors during script execution.
  • Secure Execution: The VM module provides a controlled environment for safely running untrusted code by restricting access to system resources and APIs.

VM Methods

The VM module provides several methods for creating and managing execution contexts.

  • vm.createContext(): vm.createContext() creates a new execution context that can be used to run scripts.
  • vm.Script(): vm.Script() compiles JavaScript code into a script object that can be executed in a context.
  • vm.runInContext(): vm.runInContext() runs code within a specific context.
  • vm.runInThisContext(): vm.runInThisContext() runs code within the current global context.
  • vm.runInNewContext(): vm.runInNewContext() runs code in a new, isolated context.

Example 1: Simple Script Execution

Node 
console.clear();
const vm = require('vm');

const code = 'let x = 2; x += 40; x';
const script = new vm.Script(code);

const result = script.runInThisContext();
console.log(result);

Output
42

Example 2: Executing Script with Custom Context

Node 
console.clear();
const vm = require('vm');

const sandbox = {
    x: 1,
    y: 2,
};

const context = vm.createContext(sandbox);
const script = new vm.Script('x += y; let z = x * 2; z');

script.runInContext(context);
console.log(sandbox.x);
console.log(sandbox.z);

Output
3
undefined

Benefits of VM Module

The VM module provides secure and flexible execution of JavaScript code in isolated environments.

  • Secure Code Execution: It allows you to run untrusted or dynamic code in a safe environment, protecting the main application from potential harm.
  • Isolation: Code runs in separate contexts, which keeps it from interfering with the global scope and reduces the risk of conflicts.
  • Flexible Execution: You can create custom contexts and control how code is executed, providing flexibility in different scenarios.
  • Robust Error Handling: The VM module has built-in features that help with debugging and managing errors in the isolated environment.

Also Check

Comment

Explore