It is just me or has this been happening more and more with mac apps. The unarchiver, Transmition, uTorrent..
It's been like 18 years since uTorrent... and that was Windows only, unless I'm crazy.
The tainted packages installed a ransomware application (a variant of Linux.Encoder.1, but recompiled for Mac, known as KeRanger) that encrypts the user's files and attempts to force users to pay.. The developers were not complicit in the hack that affected their software; but I included it because the point I was trying to make was that hackers are aware and targeting apps popular among developers.