Dossier
Keychain
Coverage of Keychain in the Nexus archive.
- This fake Apple app can unlock your Mac’s password vault
CrashStealer is a macOS infostealer that impersonates Apple's CrashReporter, uses a notarized installer to bypass Gatekeeper, and steals Keychain data, browser credentials, and crypto wallets. It is distributed via a fake software site requiring a PIN, indicating a targeted campaign.
- Sieve – scans Cursor/Claude chat history for leaked API keys
Sieve is a tool that scans Cursor and Claude chat history for leaked API keys, flags exposed keys by severity, and redacts them in-place. It covers various AI coding tools and stores fingerprints in Keychain. The tool aims to fill the gap in standard secret scanners that only scan git repos.