MalwarePublished 23 Mar 2026

GhostClaw expands beyond npm: GitHub repositories and AI workflows deliver macOS infostealer

Source AlienVault OTX General

Description

The GhostClaw malware campaign has expanded its distribution methods beyond npm packages to include GitHub repositories and AI-assisted development workflows. The attackers impersonate legitimate tools and utilize multi-stage payloads to steal credentials and retrieve additional malicious code. The infection chain involves executing shell commands, presenting fake authentication prompts, and establishing persistence. The campaign leverages both manual installation through README instructions and automated AI-assisted workflows. Multiple GitHub repositories have been identified, all communicating with a common command-and-control infrastructure. This shift in tactics allows the attackers to target a broader range of victims, including developers and users of AI-assisted coding tools.

Impact

This threat poses significant risks to organizations and individual developers using macOS systems, especially those involved in software development and AI-assisted coding workflows. Credential theft can lead to unauthorized access to sensitive systems, source code repositories, and internal networks, potentially resulting in intellectual property theft, data breaches, and further malware deployment. The use of GitHub repositories and AI workflows as infection vectors increases the likelihood of supply chain compromise, affecting a wide range of victims including enterprises relying on open-source tools and AI-assisted development environments. Persistence mechanisms enable long-term access, increasing the risk of espionage and data exfiltration. The campaign’s ability to impersonate legitimate tools and use social engineering tactics complicates detection and response efforts. Although no known exploits are reported in the wild yet, the evolving tactics suggest a growing threat that could impact software supply chains and developer ecosystems globally. Organizations may face reputational damage, operational disruption, and financial losses if infected systems are used as launch points for broader attacks.

Defensive guidance

Organizations should implement strict code and dependency vetting processes, especially for software sourced from GitHub and AI-assisted development tools. Employ endpoint detection and response (EDR) solutions capable of monitoring for suspicious shell command executions, fake authentication prompts, and persistence mechanisms typical of macOS malware. Enforce the principle of least privilege to limit the impact of credential theft and restrict the ability to execute unauthorized scripts or install software. Regularly audit and monitor GitHub repositories and AI workflow configurations for unauthorized or suspicious changes. Use multi-factor authentication (MFA) to reduce the risk of credential misuse. Educate developers and users about the risks of following unverified installation instructions and the dangers of executing unknown scripts. Implement network segmentation and monitor outbound traffic for connections to known malicious domains such as trackpipe.dev. Employ threat intelligence feeds to update detection rules with identified file hashes and indicators of compromise. Finally, maintain up-to-date backups and incident response plans tailored to macOS environments to enable rapid recovery in case of infection.

Indicators of compromise

Domains 1

trackpipe.dev

Hashes 16
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Community reviews

Loading reviews…

Description

AI analysisMachine-generated, updated 23 Mar 2026, 10:01 UTC

MITRE ATT&CK techniques10 from threat tags

Technical details

Indicators of compromise

Domains 1

Hashes 16

Community reviews

Related threats