universal-media-downloader

This is a video-downloading utility, with no clear evidence of malware. It has security risks when used with untrusted arguments or responses: arbitrary redirect-following requests can enable SSRF, an unchecked CDN Location is downloaded, and --out-name can escape the output directory. Restrict URL hosts and redirects, validate CDN URLs, and sanitize the output name.