/macOS malware used run-only AppleScripts to avoid detection for five years