light-travelpage

This is a travel-map SVG generator, not apparent malware. It has a potential injection risk if its configuration data is untrusted: multiple SVG attributes receive unescaped values, and `route.day` is directly inserted into an ID. Validate or safely encode these values and use context-appropriate attribute escaping before rendering the generated SVG.