pptx-slides
Warn
Audited by Socket on Sep 14, 2026
1 alert found:
AnomalyAnomalyscripts/svg.ts
LOWAnomalyLOW
scripts/svg.ts
The fragment is a simple SVG transformation utility and shows no evidence of malware or supply-chain sabotage. However, `sanitizeSvg` is not a robust security sanitizer: untrusted SVG content can retain active or externally referenced features and may become dangerous when rendered in a browser. Use a proven SVG sanitizer with an allowlist before rendering untrusted input, and avoid treating base64 encoding as sanitization.
Confidence: 98%Severity: 58%
Audit Metadata