A new version of the XCSSET malware is targeting thousands of macOS users through compromised Xcode projects and GitHub repositories.

Xcode is the official software development kit (SDK) for creating, testing, and publishing software for all Apple’s platforms.

After months of inactivity, XCSSET has resurfaced with an updated version, v40, that features enhanced evasion techniques and introduces two new components, researchers have found.