chanmeng-svg-product-card

This module generates SVG text outlines from local font files and does not show evidence of malware or data exfiltration. It has an SVG injection risk because outlineTextElements() copies the input transform attribute without escaping and text() inserts attrs verbatim; severity depends on whether untrusted values reach these options and whether the resulting SVG is rendered or otherwise consumed. No suspicious domains, URLs, IP addresses, or targeted credentials are present.