cheatsheet-generator

No clear malware or supply-chain backdoor is present. The code implements a local editor service, but its unauthenticated localhost API permits arbitrary TeX file modification, file disclosure, uploads, shutdown, and potentially dangerous LaTeX compilation. The main security concern is the direct compilation of attacker-controlled TeX and the absence of authentication or CSRF/origin protections. Risk is moderate in environments where untrusted local processes or browser pages can access the port; otherwise the behavior appears application-related.