https://mytecharm.com.co/post/ghostclaw-turns-github-habits-into-a-macos-malware-pipeline-qzzikg