I was researching how to run The Dude client on my mac and searching the forums shows that several people, including a Mikrotik employee, are recommending to use WineBottler. I use Little Snitch, which means I have to approve all outgoing connections when a new app starts up. I started WineBottler, and one of the connections it wanted to make was to blockchain.info. Why would it need to go there? My only conclusion is that it includes crypto mining software. That combined with the overall spamminess of the WineBottler download process made me instantly remove it from my mac.