Executive Summary
Security researchers have identified an evolution in the GhostClaw campaign, which now leverages high-engagement GitHub repositories (impersonating trading bots and SDKs) and AI-assisted coding agents to deliver macOS infostealers. The attack bypasses traditional security by embedding malicious instructions in README files and `SKILL.md` manifests, which target automated AI frameworks like OpenClaw.
Once executed, the malware uses a multi-stage process involving obfuscated JavaScript to capture user passwords through terminal prompts and spoofed AppleScript dialogs. It validates credentials using the native `dscl` binary and attempts to gain Full Disk Access (FDA) to exfiltrate sensitive data. This shift toward targeting AI-assisted development workflows marks a significant expansion in software supply chain threat vectors.