I came across a suspicious website called keylog.me (you can already tell from the name).
I was as curious as heck to find out what it does, so I got on a VM (Fedora Linux which I reinstalled later) and went to it but the VM crashed.
So then I went on it again with NoScript and there was a script embedded in an image (though, I couldn't see what it was because the first time the VM crashed and this time I had NoScript). Only after did I find out that keyloggers can be installed through webpage scripts (I was using firefox on the VM).
Also, I found out that a keylogger may be able to escape (and of course I had internet enabled) a VM. So now I'm concerned about my data, thinking that I'm being keylogged right now typing this question (and more sensitive data).
Currently, my OS is Ubuntu, but I have Windows 10 on a separate partition which as we all know is nothing in comparison to Linux systems in terms of security and I have sensitive data there too.
If there is a keylogger tracking me how can I get rid of it and can website keyloggers escape a VM?