The isearch package (textproc/isearch) prior to 1.47.01nb1 uses the tempnam() function to create insecure temporary files into a publicly-writable area (/tmp).
openbsd textproc\\/isearch