B
75/100 First Seen
Feb 18, 2026
Last Scanned
Feb 22, 2026
Findings
1
Score
75/100
CRITICAL 1
Findings (1)
CRITICAL
Download-and-execute
L27 Detects patterns of downloading and piping to shell execution
curl | bash FIX
Download the file first, verify its integrity (checksum, signature), inspect it, then run it. Prefer package managers over raw downloads. Never fetch-and-run in one step.
FP?
Likely FP if the target is a well-known installer (e.g., rustup, Homebrew) from its canonical HTTPS domain, though the pattern is inherently risky.