root-cause-analysis

The code change adds an unbounded, process-wide in-memory cache of rendered HTML keyed by high-cardinality runtime inputs. With no eviction/TTL/size cap and an effectively near-unique key space, the cache can grow until heap/RSS exhaustion, producing OOMKilled crashes and user-visible notification delays/duplication. The fragment shows no direct indicators of malware (no exfiltration/backdoor/credential theft/obfuscation), but it creates a significant reliability and security-adjacent risk (denial of service via memory exhaustion).