New macOS stealer campaign uses Script Editor in ClickFix attack