And you must never again attach that VM/container to the network/internet if it had access to sensitive information at the time of running the untrusted code.