That is Gatekeeper, not malware. The app ships outside the App Store — macOS greets any independent DMG this way until you explicitly allow it.
- Right-click MacFullStack → Open.
- Or System Settings → Privacy & Security → Open Anyway.
- You need macOS 14+ and Apple Silicon (not Intel, not Rosetta).
Take the DMG only from the download page. After the first Open, it installs like a normal app: Native by default, first PHP project on Free.
Help: /help/install-download, /help/gatekeeper-ports.