I downloaded an app from github (mac2imgur), and it refused to run.

$ codesign -vv mac2imgur.app
mac2imgur.app: invalid Info.plist (plist or signature have been modified)
In architecture: x86_64

It seems unlikely the developer uploaded something with a bad signature.

Is this a red flag that the app may have been compromised and reuploaded?

1 Answer 1


It’s quite likely a developer uploaded something incorrectly codesigned. As a developer myself, I know it takes time to get it right, and many don’t bother.

You must log in to answer this question.

Not the answer you're looking for? Browse other questions tagged .