According to Tavis Ormandy's twitter post it was 1Password, https://twitter.com/taviso/status/834900838837411840