“Huge” number of Mac apps vulnerable to hijacking, and a fix is elusive 10 years ago
interesting command from one of the comments on the original article:
find /Applications -path '*Autoupdate.app/Contents/Info.plist' -exec echo {} \; -exec grep -A1 CFBundleShortVersionString '{}' \; | grep -v CFBundleShortVersionString
This gives an overview of the programs using sparkle, and which version.