Mac High Sierra hijinks continue: Nasty apps can pull your passwords

Apple still hasn't been able to seal up keychain access hole for unsigned applications

A security shortcoming in earlier versions of OS X has made its way into macOS High Sierra despite an expert's best efforts to highlight the flaw."