“(..) users must exercise extreme caution toward unapproved downloads of Xcode projects and apps. Users need to ensure software authenticity before they install new applications since the proper security stands in the Mac App Store.”
Quote
Sources
A new Malware can steal Crypto on Apple MacOS Devices: Microsoft
Referenced by
Microsoft Threat Intelligence advised users to inspect and verify any Xcode projects downloaded or cloned from repositories and to install applications only from trusted sources to avoid XCSSET infection.
Crypto news
Claim