userinit.sh
Out of the blue with no changes I am aware of get message "Background Items Added "userinit.sh" is an item that can run in the background..." Disabled it in Login Items since it stated "Item from unidentified developer". Also noticed that init.sh also was from an unidentified developer. Is it a malware?