Validating the integrity of your copy of Xcode

A few days ago, we posted the story about the XcodeGhost malware that made its way onto the App Store via compromised copies of Xcode.

In response, Apple pulled affected apps from the store and, just as importantly, sent out letters to developers to test their copies of Xcode, to make sure it was indeed a valid copy from Apple.

In a nutshell, developers typed this line into the Terminal utility:

spctl --assess --verbose /Applications/Xcode.app

Here’s what I saw when I ran this on my Mac:

/Applications/Xcode.app: accepted
source=Mac App Store

You might also see:

source=Apple

or

source=Apple System

Anything else and you should redownload Xcode and recompile any current apps.