CYBERSECURITYTRACKER
TRACKING7,004 stories in this site build1,474 vulnerability news stories in this site build
Permanent story citation

New XCSSET variant targets macOS devs via compromised Xcode projects

This page keeps the story as Cybersecurity Tracker first published it. If the tracker later corrects it, the correction appears below the original and never replaces it.

Back to newsStory 3842

As cited

Copy frozen at (site build).

threat intel

New XCSSET variant targets macOS devs via compromised Xcode projects

A new variant of XCSSET malware is distributing to macOS users through compromised Xcode projects and GitHub repositories. The malware targets development environments where it can establish persistence and access sensitive developer credentials and build systems.

Why it matters: macOS developers and organizations relying on Xcode workflows face credential theft and supply chain compromise risks; audit repository integrity and dependencies immediately.

Source published
First seen by Cybersecurity Tracker

Source attribution

Correction

Correction recorded as of .

threat intel

New XCSSET variant targets macOS devs via compromised Xcode projects

A new variant of XCSSET malware is distributing to macOS users through compromised Xcode projects and GitHub repositories. The malware targets development environments where it can establish persistence and access sensitive developer credentials and build systems.

Why it matters: macOS developers and organizations relying on Xcode workflows face credential theft and supply chain compromise risks; audit repository integrity and dependencies immediately.

VendorsAppleGitHub
Source published
First seen by Cybersecurity Tracker

Source attribution

Glossary