Reply to post:

Technically a sophisticated attack -modifying Xcode itself.

However, the developers picking up Xcode from unknown sources -not so impressive!

That's not far from tricking auntie to click on that exe attachement.