Several serious vulnerabilities, of which one could directly affect you. eMudhra certificate compromise, PHP2Shell and EUFI vulnerabilities examined.
curl
By default, quarantine xattrs aren’t attached to new files created by an app. That behaviour is controlled by a setting in their Info.plist, and can be overridden in an Exceptions property list.
Perhaps not as effective as one of the better anti-virus apps, it is free and built into OS X.
