Cocoa script from “unknown source”
Go to about this Mac > system report > software > applications. If you see cocoa-apple script from “unknown source”, you’re in trouble. Cocoa scripts hit the kernel, boot loader, authentication, automation, accessibility and GUI. This appears to be a wide spread exploit - it’s not “trivial or normal”. Check YouTube, see how much damage/control unsigned cocoa scripts can do. Then contact apple and demand they fix this.
MacBook Air 13", macOS 10.14