https://github.com/0x4D31/stinger

Stinger is an unprivileged endpoint deception tool for macOS and Linux. It uses FIFO baits, other local traps, and protected sessions to detect secret collection as it happens.