bun-development
Fail
Audited by Gen Agent Trust Hub on Feb 20, 2026
Risk Level: CRITICALREMOTE_CODE_EXECUTIONEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
- Remote Code Execution (CRITICAL): Automated scans detected the command 'curl -fsSL https://bun.sh/install | bash'. This executes code from an external URL without prior verification or sanitization.
- External Downloads (HIGH): The URL 'https://bun.sh/install' is not from a trusted source (e.g., GitHub organizations like Anthropics or Google).
- Command Execution (HIGH): The pattern of piping curl output to bash is a dangerous practice that allows arbitrary code to run on the host system.
Recommendations
- HIGH: Downloads and executes remote code from: https://bun.sh/install - DO NOT USE without thorough review
- AI detected serious security threats
Audit Metadata