discovered 2026-07-11
macOS Mach-O arm64 payload extracted from dist/intro.js binary container. Rust-compiled infostealer with LaunchAgent persistence (RunAtLoad, KeepAlive, 30s StartInterval). 3.04 MB decompressed.
