GhostClaw expands beyond npm: GitHub repositories and AI workflows deliver macOS infostealer