Developers for Apple’s platforms are being hacked through importing shared Xcode projects infected with malware.
Researchers from SentinelOne detailed the growing trend after discovering a macOS malware dubbed XcodeSpy.
“Threat actors are abusing the Run Script feature in Apple’s Xcode IDE to infect unsuspecting Apple Developers via shared Xcode Projects,” the researchers explained.