Product
Xcode
- First Reported
- Apr 17, 2026
- Latest Reported
- Sep 8, 2026
Reported Context (2)
- XCSSET is a macOS worm that spams a malicious build hook into every Android Gradle project, Xcode project, and git repository it can find on a compromised machine. The maintainer's machine was infected, and when they Aikido Finds XCSSET in Flutter Package on pub.dev
- Studio Code, Cursor, Windsurf, Antigravity, JetBrains IDEs, Android Studio, Eclipse-based IDEs, and Xcode. Coverage works identically on macOS, Windows, and Linux. StepSecurity Adds Cross-IDE Extension Inventory and Risk Scoring
Malware (2)
MITRE ATT&CK (14)
Vendors (2)
Products (16)
Tools (2)
Note: Related entities, including threat actors, malware, CVEs, MITRE ATT&CK techniques, vendors, products, tools, countries, and industries, are shown when they appear in the same reporting. Their presence does not necessarily mean they were targeted, compromised, vulnerable, responsible for the activity, or directly involved in the incident.
