Security considerations for widget:

As any program code, widgets can be used for malicious purposes. One example is the Facebook “Secret Crush” widget, discovered in early 2008 by Fortinet as luring users to install Zango malware