A flaw has been found in Safari if you have open “safe” files after downloading checked. Any site can use this flaw to attack you, just by visiting it.
To secure yourself, go to Safari Menu, Choose Preferences, click General, and uncheck “open “safe” files after downloading”
You’ll now have to double click widgets, sit files etc to open them, which is no big deal compared to losing every file in your documents folder.