The Unofficial Apple Weblog has a reference to an interesting article on stephan.com on virus-like activity via Dashboard Widgets. The danger exists if you are running Tiger and have Safari's Open "safe" files after downloading option checked. See the stephan.com page for a (harmless) example.