A few days ago, we posted the story about the XcodeGhost malware that made its way onto the App Store via compromised copies of Xcode.
In response, Apple pulled affected apps from the store and, just as importantly, sent out letters to developers to test their copies of Xcode, to make sure it was indeed a valid copy from Apple.
In a nutshell, developers typed this line into the Terminal utility:
spctl --assess --verbose /Applications/Xcode.app
Here’s what I saw when I ran this on my Mac:
/Applications/Xcode.app: accepted
source=Mac App Store
You might also see:
source=Apple
or
source=Apple System
Anything else and you should redownload Xcode and recompile any current apps.