WebKit Browser Spawning Shell or Script Interpreter on macOS

Chaitanya B B@mralien

•updated Dec 14, 2025•29•1•373

Detects when a WebKit-based browser process on macOS spawns a shell or script interpreter. This is highly suspicious and can indicate successful exploitation of a browser vulnerability for initial code execution.