OSAScript from unknown developer

Since Ventura my login items have shown these two scripts at login and purge.

I am not sure what they are for, and the fact it says unknown developer makes me wary.

How can I find what is running these scripts?

Thanks

Rob

iMac 27″, macOS 10.15

Posted on Oct 31, 2022 12:28 AM

Top-ranking reply

Rob Snow Author

Level 3

617 points

Posted on Oct 31, 2022 2:12 AM

View in context

Similar questions

What is osascript in my login panel? After upgrading to Ventura 13.2, I got a bunch of warnings telling me I have osascripts in my login. I've got five of these in my list of login items and it says they are unidentified. What are they? Should I disable them or not?
4045 7
What is osascript in my Automation tab in securities? Recently at the beginning of the week I completely erased my hard drive and reinstalled Mac Ventura because I was previously running Catalina and found out I had a keylogging virus on the Mac and somehow they even messed with my SIP turning parts of it off. I believe that might have contributed to both my main email getting hacked and my facebook as well. I wiped the hard drive clean and then installed a fresh copy of Ventura with all securities bringing it up to date. I installed and ran TotalAV (just ran the scan and then uninstalled it) 6 days ago. It turned up a potential phishing thing called JS/phish.G7 (when I installed Microsoft Office straight from Microsoft.) I had TotalAV remove that. I have since been watching the mac every day for anything strange or unusual. This morning while looking over all of my system items, I noticed osascript now appearing in my Automation Tab. I can't remove it, I turned it off though. When asked to display in finder it's located in the hidden usr folder. Is this a safe thing? or should it not be there and needs to be removed? I tried looking for any strange apps that might be calling for it. I didn't install anything yesterday and it wasn't there yesterday. I also checked in activity monitor but not really sure what I should be looking for in there. Thanks, Iam very stressed and on my toes now because of my accounts being hacked and me finding that keyloggin thing on my mac. Has me super nervous.
2821 6
Unfamiliar Login Items - Allow in Background I’ve got macOS Ventura. This evening I went on to the Login Items section, and saw the category “allow in the background” for the first time. There are a list of items, some from ‘unidentified developers’ which I don’t know what they do, e.g. StandaloneUpdaterDaemon or OSMessageTracer. I’ve uploaded a picture. Are these likely threats or some sort of malware / adware / concern, or not? Any advice would be appreciated! (And I know I should uninstall Norton, but I’m too worried now!)
4041 2

2 replies

Top-ranking reply

Rob Snow Author

Level 3

617 points

Oct 31, 2022 2:12 AM in response to Rob Snow

Barney-15E

Level 10

122,084 points

Oct 31, 2022 3:44 AM in response to Rob Snow

They are both part of the OS. Most of the underlying Unix infrastructure and many Apple developed items have an “unidentified developer.”

open - opens things

osascript - uses the open scripting architecture to run various scripts in the shell

This thread has been closed by the system or the community team. You may vote for any posts you find helpful, or search the Community for additional answers.

OSAScript from unknown developer