paper-formatter

No clear malware behavior is present. The main security concern is LaTeX injection from untrusted JSON inputs, particularly because backslashes are not escaped and style values are inserted into commands. Compiling attacker-controlled generated documents may have consequences depending on the TeX engine and its configuration.