Tatsächlich habe ich NightOwl installiert.
Via Hacker News....apparently a macOS app that toggles light/dark mode called NightOwl has been surrendered to or else captured by ne'er-do-wells, and the program has been updated with a component that turns host systems into a traffic relay. Going to poke around and see if we can figure out whether a known proxy service is leveraging this software.
https://robins.one/notes/uninstall-the-nightowl-app-now.html