BlockBlock
macOSMalware installs itself persistently to ensure it's automatically (re)executed.
BlockBlock monitors common persistence locations and alerts whenever a persistent component is added.
BlockBlock does exactly this. And while you're at it, maybe take a look at KnockKnock as well.
![BlockBlock Homepage Screenshot (2024-05-27)](https://cdn.scribbles.page/rails/active_storage/representations/proxy/eyJfcmFpbHMiOnsibWVzc2FnZSI6IkJBaHBBakJuIiwiZXhwIjpudWxsLCJwdXIiOiJibG9iX2lkIn19--a34e976eba27c87fa7cd93685da7b8ef341dd799/eyJfcmFpbHMiOnsibWVzc2FnZSI6IkJBaDdDRG9MWm05eWJXRjBTU0lJY0c1bkJqb0dSVlE2RkhKbGMybDZaVjkwYjE5c2FXMXBkRnNIYVFJQUNHa0NBQVk2Q25OaGRtVnlld2M2Q25OMGNtbHdWRG9NY1hWaGJHbDBlV2xrIiwiZXhwIjpudWxsLCJwdXIiOiJ2YXJpYXRpb24ifX0=--768aeab7fb7843d85fe5b2b4ba237e06e6ef604f/Screenshot%202024-05-27%20at%2016-33-29%20BlockBlock.png)