Adex’s investigation into XCSSET began with an iOS development studio concerned that its macOS infrastructure may have been exposed to malware. What followed was a case study in how a developer workstation can become part of a wider supply-chain infection without any…