There is a Javascript VMP too:
though I've not seen much interesting work in this area for devirtualization. Protecting Javascript is difficult snd minifying just makes it harder to read and strips symbols, but doesn't actually solve the security issue.
I'm guessing ECMAScript standard might directly start addressing this at some point possibly even by adding an opcode variant of the language. This will regardless likely become a large reverse engineering area soon as HTML5 has become feature rich, countless advanced frameworks like HTMX and React, Flutter, others have come about. Cloud databases like firebase or mongoDB are everywhere, etc. Meanwhile traditional desktop apps are on the decline and many are moving to the web. All office productivity software is on the web now pretty much.
There is much reason to start thinking about this topic. This area has changed so much and do rapidly in the past 10 years, it's near impossible to keep up with it in detail.