XCSSET macOS malware returns with first new version since 2022

Microsoft warns of a new XCSSET macOS malware variant that continues to target Xcode projects to infect developers and spread via repositories; it retains infostealing capabilities (wallets, Notes, app credentials) while adding more randomized obfuscation, updated persistence mechanisms (persisting via ~/.zshrc aliases and by replacing Launchpad on the Dock using a signed utility), and new payload placement strategies inside Xcode build settings. Although attacks have been limited so far and Microsoft provided no IoCs or hashes, the threat to developers and potential for repository-based propagation makes this a high-risk supply-chain style infection vector.