Background
A few days ago, while searching for the Confluence macOS client, I unexpectedly discovered this ‘gift’ program. I found the entry point directly via a Google Search. The perpetrators primarily leveraged users’ trust in GitHub, guiding them to copy and execute a download and installation script locally. I