Macos malware used runonly applescripts detection