ugc-talking-head-video
Warn
Audited by Socket on Sep 16, 2026
1 alert found:
AnomalyAnomalyscripts/host_file.py
LOWAnomalyLOW
scripts/host_file.py
This is a file-hosting utility rather than clear malware, but it has a significant privacy and data-exfiltration risk because it uploads arbitrary local files to anonymous third-party services and exposes successful uploads through public URLs. The code contains no evident obfuscation or command injection, and no direct credential theft or persistence behavior. It should only be used with intentionally shareable files; URL validation, HTTPS enforcement, response validation, and explicit user consent would reduce risk.
Confidence: 98%Severity: 68%
Audit Metadata