GhostClaw expands beyond npm: GitHub repositories and AI workflows deliver macOS infostealer

Jamf Threat Labs documents an active GhostClaw/GhostLoader campaign delivering a macOS credential-stealing infostealer via malicious GitHub repositories and AI "skill" installation workflows; attackers use staged repositories, curl|bash and SKILL.md installers to run an install.sh bootstrap that installs node, runs obfuscated setup.js to prompt for and validate credentials (via dscl and AppleScript), fetches an encrypted stage-two payload from trackpipe.dev, establishes persistence under npm-like paths, and uses postinstall.js to obscure activity; the report includes repository URLs, file SHA256s, campaign UUIDs, NODE_CHANNEL values, and mitigation guidance.