GITHUB'S REPUTATION BEING EXPLOITED BY BAD ACTORS TO DISTRIBUTE MALWARE

Summary from the TLDR InfoSec newsletter

A security researcher explains how they discovered a macOS malware campaign spreading through SEO and GitHub links disguised as a legitimate app. The GitHub page appears legit, featuring a demo and an install command for Terminal. This command downloads malware and clears all xattrs. The page also hosts a dmg with an obfuscated osascript that executes a second script to remove quarantine and run stackprep.