FolderActionsMalware

Description: Automatic Folder Actions to check LaunchAgents and LaunchDaemons to avoid malware.

Installation

Download files here
Copy all (5) files to ~/Library/Workflows/Applications/Folder Actions.
When a new file is added into one of the targeted directories, you'll be notified.

Home folder can be found by clicking Finder in your Dock, clicking Go in your menu bar, then selecting Home.

Library folder can be found by clicking Finder in your Dock, hold down option/alt, clicking Go in your menu bar, then selecting Library.

If folders do not exist, you must create them. Ensure correct spelling and capitalisations are used.

Home Folder > Library > Workflows > Applications > Folder Actions > files go here

Each file is named the directory of the Folder Action

/Library/LaunchAgents/

/Library/LaunchDaemons/

/System/Library/LaunchAgents/

/System/Library/LaunchDaemons/

~/Library/LaunchAgents/

What is the script used to detect if new files are created in these directories?

See here

Reddit thread made by: /u/jpeeri

Script to notify user when a new file is added created by Apple.

Everything else was compiled by me.