> can it run in WebAssembly?

You can safely assume so. Bellard is the creator of jslinux. The news here would be if it _didn't_.

> What's the difference to regular JavaScript?

It's in the project's README!

> Is it safe to use as a sandbox against attacks like the regex thing?

This is not a sandbox design. It's a resource-constrained design like cesanta/mjs.

---

If you vibe coded a microcontroller emulation demo, perhaps there would be less pushback.