Back Reddit

MacOS malware

Reddit •/u/deenspaces • December 15, 2025

Don't know what to do with this information really, but this site distributes some sort of malware in a very obvious way. So, it just downloads a base64 encoded script, decodes it and runs it. The script then downloads an osascript that reads all that it can find really - keychains, cryptowallets, etc; and then it seems to send the data somewhere. Well, no idea, maybe someone might find it useful. I'll post a github gist if anyone interested. submitted by /u/deenspaces [link] [ ]

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Malware Campaign Targets Open VSX Extension with 5,066 Downloads A sophisticated malware campaign has compromised the Open VSX extension marketplace, affecting over 5,000 developer workstations. The malicious package masqueraded as a legitimate Angular Language Service extension, embedding encrypted malware that activates upon opening HTML or TypeScript files. The attack utilized typosquatting and steganography techniques to evade detection. 20 sources 37

Extracted Entities

MacOS malware

The full story

Extracted Entities

Attack Types (1)

MITRE ATT&CK (2)

Platforms (1)

Tools (1)