I set up a quick demonstration to show risks of curl|bash and how a bad-actor could potentially hide a malicious script that appears safe.

It's nothing new or groundbreaking, but I figure it never hurts to have another reminder.

you are viewing a single comment's thread
view the rest of the comments
[–] 8 points 8 months ago* (1 child)

In addition to the other examples it's also in the default installation mode for node.js - they use this to install nvm

Ya cant even blame someone non-technical falling for this if they haven't been explicitly informed - it's getting reinforced as completely normal by too many "reputable" projects.

  • source
  • parent
  • hideshow 1 child comment