A Chrome add-on called Video Downloader (or Video Downloader Plus) has a serious cross-site scripting flaw.

If you use it, check that you're on the latest, recent version which fixed it.

https://thehackerblog.com/video-down...loit-detailed/