Hello, 'Apple' here, and this dodgy third-party code is A-OK with us

Subtle attack thwarts macOS code-signing process

A recently discovered security vulnerability in how third party vendors are checking Apple's "code-signing" process potentially made it easier to trick macOS users into running malicious third-party code."