I keep getting this notification over and over again

I keep getting the same notification, multiple times an hour, and usually in pairs when using my computer.

Nothing is added to the application list, and I haven't had Setapp installed on my Mac for months.

It's getting quite ridiculous.

ctphoto1 wrote:

Clicking on the "i" shows it located Macintosh HD > usr > bin >

Because that is the location of the "open" command, or the "osascript" command. The more important question is what app or script these executables are running.

[Edited by Moderator]

Thank you for this post, I was able to do the same. I've also noticed the same item appearing on one of two accounts on my MacBook Pro running Ventura. From the bin file it looks like it arrived on 12/2 @ 1:30 am. As referenced in similar replies to this thread.

Puzzled I looked at the install log for the laptop and found not installs listed at the same time these files were modified.

I do not have a NAS or any other storage device attached. And honestly this post continues to draw attention to the silent updates vendors push without describing what they are doing to the user. Not ideal in an age when we're all on high alert for hackers.

I've included a link to this thread on my Apple Feedback Assistant ticket. I would encourage any Beta Program participants experiencing this issue to report it as well. The fact that the "open" item is listed with our a vendor, doesn't appear in the install log and has a really vague name running from a hidden folder is just stupid to do to users.

I have disabled the item in the Background Items. In addition to this, I've had repetitive 'Background Items Added' message and an odd "Confirm Password" message that wouldn't clear for a while.

ctphoto1 wrote:

I have turned off all notifications

While these notifications are what people are primarily complaining about, the notifications themselves are not the problem. It is what is generating these notifications. Plus, some people are confused about these items. They think those controls in System Settings > Login Items / All Background tasks are the notifications. They are not. Those controls are for the apps themselves. The act of turning it off may, in fact, be what triggers the notification.

it still pops up, basically anytime I move or click on the window showing my Synology contents. I talked to Synology and they claim it is not them.

It sure sounds like it is a Synology item. Third party hardware vendors often have no idea that Apple has released a new operation system with signification new functionality that affects their product.

According to that screenshot you posted, some of those items are turned off. I don't know if you did that or they were turned off originally. I realize this is very confusing. The bottom line is that no one should ever use this new Ventura interface for any purpose. If you did make changes, and the software you disabled (or enabled) isn't aware of how this new interface works (and virtually no one is), then you can expect the system to get totally confused.

If you are getting any unexpected and/or unwanted notifications about background items, then uninstall the software that is, or appears to be, related. Restart. Make sure you get to a point where you get no more notifications. Then reinstall the software. Never touch the "Login Items/Allow background apps".

Have the same issue with Synology Surveillance station, reaching out to Synology as per expected they say this is an "Apple" issue and to reach out to Apple.... I am still trying to make them escalate to a Dev i can talk to.

Anyway, i dug a bit deeper and here is what i found:

the culprit file can be located here: ~/Library/LaunchAgents/

each time synology applications run on MAC ventura, in this case the Synology Surveillance station it create a file called: 

com.synology.SurveillanceStationClient.plist

This file cause the notification to non stop pop up, deleting the file fixes the issue HOWEVER next time you open Surveillance station the file will be recreated and hence the issue come back. 

Here is the content of the file: 

<?xml version="1.0" encoding="UTF-8"?>

<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">

<plist version="1.0">

<dict>

<key>Label</key>

<string>com.synology.SurveillanceStationClient</string>

<key>ProgramArguments</key>

<array>

<string>/usr/bin/open</string>

<string>/Applications/Surveillance Station Client.app</string>

</array>

<key>RunAtLoad</key>

<true/>

</dict>

</plist>

As we can see the string does call the open file to open and the key is run at load, 

this is a synology bug that it should not arguably call the "Open" file itself and keep that one in the background. 

Synology is not willing to help yet, however - it does seem like the engineer i am talking to via the support ticket refuses to escalate the case.. yet...

MaSe1981 wrote:

As we can see the string does call the open file to open and the key is run at load, 

this is a synology bug that it should not arguably call the "Open" file itself and keep that one in the background. 

There is nothing wrong with calling the "open" command. In this case, the fault is Apple's for showing these entries as "open" or "osascript" instead of "/Applications/Surveillance Station Client.app", which would have been much more informative.

However, Synology should definitely not be re-creating this file every time it gets launched. As far as the notifications go, Apple's software is working properly. This is most definitely a Synology bug.

I, too, am getting this message since upgrading to Mac OS Ventura 13.1 on my Intel-based iMac (iMac20,2) whenever I open or close MacCleanse, version 11 from KoingoSW. It will display the message "Background Items Added" as above in "Notifications" twice whenever I open MacCleanse and then again twice whenever I close the app MacCleanse. The MacCleanse and MacCleanse Helper app have already been given Full Disk Access in the Settings > Privacy and Security > Full Disk Access. Looking at the help (man) file for "open" in the Terminal app, it says:

The open command opens a file (or a directory or URL), just as if you had double-clicked the file's icon. If no application name is specified, the default application as determined via LaunchServices is used to open the specified files.

If the file is in the form of a URL, the file will be opened as a URL.

This should be normal unless the file is infected with a virus or malware, right? So, is there something that MacOS users should be aware of from the anti-virus community that is trying to maliciously run using the "open" command? I am also running BitDefender Antivirus for Mac, version 9.2.0, but it does not alert me to anything odd before, during, or after this occurs.

tgwilloughby wrote:

This should be normal unless the file is infected with a virus or malware, right? So, is there something that MacOS users should be aware of from the anti-virus community that is trying to maliciously run using the "open" command? I am also running BitDefender Antivirus for Mac, version 9.2.0, but it does not alert me to anything odd before, during, or after this occurs.

No. It has nothing to do with malware. Your “MacCleanse” app is buggy. You will need to uninstall it to stop the notifications. BitDefender sounds like it is working properly.

Synology provided me a version of Surveillance Station that is now fixed and i no longer get this popup. Here is their version, before they release it publicly. I can confirm its fixed. https://supfiles.synology.com/sharing/l4pjKrIse

@jusatin

My boss (it would be) has been having this problem and we had already tried suggestions by others of resetting the relevant database, rebooting and a previous macOS update.

Whilst the boss has been on a business trip I was able to update his computer from macOS 13.2.1 to 13.3.1 (skipping 13.3) and this does finally appear to have cleared the problem.

In our case it was being reported every couple of minutes for both Zoom and Parallels.

The initial warning once whilst itself annoying to long time Mac users makes some sense as part of educating/alerting less experienced users. I do notice however that it happens normally not just for the initial install but also updates of the relevant apps due to the relevant installers typically re-installing launch daemons/agents during such updates even if this is not strictly necessary. (The developers have been lazy and not put a check in to see if it is needed.)

Overall to experienced/veteran Mac users all these warnings and checks added by Apple over recent years - even to enterprise managed devices is making the Mac sadly even more annoying than Windows Vista was and as featured in this famous advert.

Mac vs PC Windows VistaYouTube · TheYummyAPPLEPie31 seconds29 Aug 2011

Look under "Notifications" and check the settings for each item

You would have to uncheck all and then one at a time turn on and test (may take a while).