XcodeGhostSource/XcodeGhost

Health v2 · maintenance only

Flags: no_releases no_license

Adoption not part of the score

1925 stars · 783 forks observed · 2026-08-28

What it is AI-extracted, prompt v1, taxonomy v1, 2026-08-30, confidence not recorded

The published source code of XcodeGhost, the infamous 2015 malware that spread through a compromised Xcode build configuration and infected iOS apps on the App Store. It is archived purely as a historical/security-research artifact; the author shut down its servers and the code is dead.

Use cases

• study how the XcodeGhost supply-chain attack worked
• analyze malware that harvested basic app and device info from iOS apps
• research compromised Xcode build configuration attacks
• teach iOS supply-chain security lessons
• compare the source against infected app samples from 2015

When to choose

• you are a security researcher studying historical iOS supply-chain malware
• you need reference source code for the XcodeGhost incident
• you are teaching or writing about App Store malware history

When to avoid

• you want a usable or maintained tool - the code is dead and has no license
• you need a defensive security product rather than malware source
• you cannot safely handle malware source code in an isolated environment

Facets

application · maturity abandoned

security reverse-engineering security apple-ecosystem developer-tools malware malware-source xcode supply-chain-attack ios objective-c security-research historical macos

Member repositories

For agents

markdown · JSON · MCP: product_card(name="XcodeGhostSource/XcodeGhost")