AmnesiaStealer: a multi-stage Rust-based macOS infostealer that hijacks Chromium browsers
The landing page at https://github.aoitour.com reproduces GitHub's dark theme, the Octocat mark and a "Verified Publisher" badge next to a "Download for macOS" heading. Rather than offering a download, it presents a "Terminal installation" box framed as a convenience for advanced users, with a one-click Copy button and numbered instructions to open Terminal through Spotlight, paste, press Return and, at step three, "Enter your device password and confirm the installation." The same counterfeit GitHub page has also been observed in Atomic (AMOS) and MacSync stealer campaigns, so the lure template is shared across families rather than unique to AmnesiaStealer.

https://www.jamf.com/blog/amnesia-stealer-macos-infostealer-clickfix/