Less common but growing: malicious extensions in the Chrome Web Store (or side-loaded via .crx files) that download Paceload after granting permissions like "read and change all your data on websites."
Clicking the button downloads a .pkg file named Apple_Security_Update_2025.pkg . Inside is the Paceload dropper. paceload mac