App Store 上架审核被误认为是 XcodeGhost 要怎么办

[ch3rub1m]

App 的新版本提交好几天了没有成功更新，今天上 itunes connect 看了一下，发现 Apple 给我发了一条消息，全文如下：
November 4, 2015 at 5:38 AM
发件人 Apple
Hello,

Thank you for your submission. On September 18 2015, we posted information about the removal of your previously submitted app in Resolution Center. That message indicated that your app was removed from the App Store because it was compiled with a counterfeit version of Xcode, which infected the app with malware.

In order to protect your end users, all of your submitted apps will be placed on hold until you resolve the XcodeGhost malware issue.

Please download a copy of Xcode from the Apple Developer portal - https://developer.apple.com/xcode/download/, and then recompile and resubmit your removed app for review.

Best regards,

App Store Review

大致意思是我提交的 app 不是正规的 xcode 编译的，但是我千真万确是从 app store 上下的 xcode ，不知道是中间哪个环节出了问题？应该如何跟 apple 解释，直接回复 itunes connect 上的信息可以吗？

[ixiaozhi]

xcode 验证下， spctl --assess --verbose /Applications/Xcode.app
然后检查下代码里有没有问题
http://drops.wooyun.org/news/8864 0x02 检测方法

[wildlynx]

@ch3rub1m 有可能你试用了被污染的第三方框架了

https://www.v2ex.com/t/234420#reply0 XcodeGhost 扩散到了第三方框架，简直防不胜防！