ClickFix campaigns spread MacSync macOS infostealer via malicious Terminal commands since Nov 2025, targeting AI tool users ...
Threat actors are publishing clean extensions that later update to depend on hidden payload packages, bypassing marketplace ...