If you ran the installer, assume your passwords and session tokens have been compromised and change them from a clean device. If you'd like, I can help you: Identify suspicious system files in your Library folders.
Immediately stop any potential data exfiltration to a command-and-control server. If you ran the installer, assume your passwords
These malicious installers often use scripts to create LaunchDaemons , ensuring the malware remains active even after a reboot. If you ran the installer
Fake CleanMyMac sites have been caught delivering this infostealer, which targets sensitive browser data and Telegram sessions. If you ran the installer, assume your passwords