BlockBlock
macOSMalware installs itself persistently to ensure it's automatically (re)executed.
BlockBlock monitors common persistence locations and alerts whenever a persistent component is added.
BlockBlock does exactly this. And while you're at it, maybe take a look at KnockKnock as well.
