The setup process asked users to run a shell command that decoded a hidden payload, ran it, and then downloaded a second script. Finally, it installed a macOS binary and removed quarantine settings so the built-in malware checks wouldn't detect it.

This just in, installing random un trusted binaries directed by plug in developers will get you in trouble. Garbage propaganda.