maliciousChild

child1.js

var secretKey = 'foo';
setInterval(function () {
  secretKey = secretKey + 'bar';
  console.log('My secret key is ' + secretKey);
}, 1000);

child2.js

(function installMaliciousLogger() {
  var origConsoleLog = console.log;
  console.log = function () {
    var evilMsg = 'Script 2 caught another script logging:';
    Array.prototype.slice.call(arguments).forEach(function (arg) {
      evilMsg = evilMsg + ' ' + arg;
    });
    origConsoleLog.call(this, evilMsg);
  };
})();

parent.js

var fs = require('fs')
  , vm = require('vm');

scripts = [fs.readFileSync('child1.js'),
           fs.readFileSync('child2.js')];

sandbox = { 'console' : console,
            'setInterval' : setInterval };

scripts.forEach(function (src, i) {
  vm.runInNewContext(src, sandbox, 'script ' + i);
});