Abandoned apps don’t always go away quietly.
What happened
Eye Research found that Time4Popcorn, an unofficial Popcorn Time build, left a small update checker that ran every time the Mac started, even for people who hadn’t opened the app in years. It trusted whatever it downloaded and gave it full permission to change the system. The developers abandoned the project, so the domains the checker called were expiring, and anyone who grabbed one could push malware. Eye Research took over one domain, estimates 250,000 to 350,000 Macs were affected, and used the checker to disable itself on more than a million Macs and PCs. It found no sign that criminals had used it. Other flaws remain, and some domains are still outside the researchers’ control.
My take
If you ever installed it, uninstall it, and check your login items and launch agents for leftovers. Good excuse to clean out every app you haven’t opened in a year.
God Bless, and Needs Garlic!