New XCSSET malware targets macOS developers through compromised Xcode projects
A new version of XCSSET, v40, targets macOS users through compromised Xcode projects and GitHub repositories. Developers become infected when building compromised projects, after which the malware can spread to other Xcode projects on the system and through shared source code.
CERT24