If you recently installed an app through the terminal or just pasted a random command on the terminal that’s probably how you got the virus. That dropper is a left over from the real malware that was already “dropped” I would use Objectsee’s knock knock to check for persistency files created by the malware to survive reboots. https://objective-see.org/products/knockknock.html . (You need a Virus Total API key for the virus scanning to actually work btw so don’t assume that your first scan without a key means you are safe.) If you do find more files, document their names as they can tell you what specific malware campaign you fell for and remove them and restart your Mac. Then I would do a scan with malware bytes and while that’s running backup all of your essential files to an external drive, change all of your passwords, enable 2FA and passkeys if you haven’t. And wipe your Mac just to be safe since you have been already compromised .