GhostClaw Rising: AI-Assisted Malware Campaign Targets macOS via Malicious GitHub Repos

Jamf Threat Labs details an active GhostClaw campaign that abuses GitHub repositories and AI-assisted development workflows to distribute macOS credential-stealing malware disguised as legitimate developer tools; attackers leverage social proof and automated installation workflows to increase reach, use a single domain with unique identifiers for segmented operations, and effectively create a supply-chain-style threat against developers and automated toolchains.