pdf-converter

No direct malware/backdoor behavior is evident in this module. However, it creates a moderate-to-high security exposure by (1) fetching third-party SVG assets at runtime from a CDN and embedding them as base64 `data:image/svg+xml` payloads without sanitization/validation, and (2) trusting pre-existing cached files in a fixed absolute directory without integrity checks. If the returned markup is rendered in an environment that treats SVG as active content, or if the cache directory can be tampered with, this can enable content injection risks.