Playlists and "podcast" episode descriptions are hiding malware and piracy sites in plain sight on the streaming platform.