The malware is named Silver Sparrow, and uses the macOS Installer Javascript API to execute commands. Here’s what you need to know.