latex-pdf-compiler

The code is a legitimate LaTeX compilation wrapper, not clear malware. Its main security concerns are unsafe use of the user-controlled filename, execution of untrusted LaTeX through pdflatex without a sandbox, possible file access or resource exhaustion, unintended PDF disclosure through path manipulation, and failure to clean up temporary files. Filename validation, a dedicated sandboxed worker, restricted TeX settings, resource limits, output-size limits, and guaranteed temporary-directory cleanup are recommended.