Cybercriminals are impersonating popular software like LastPass and Malwarebytes on GitHub, using poisoned search results and sponsored ads to trick Mac users into installing infostealers.