uniform-breadcrumbs

No clear malware behavior is present. The main security issue is a JSON-LD script-injection risk: untrusted crumb titles are placed into raw script HTML without escaping `<`, despite a warning in the documentation. Escape `<` in serialized JSON-LD or use a safe serializer, and validate URL inputs and the site URL.