command-safety-3
Fail
Audited by Socket on Mar 18, 2026
1 alert found:
MalwareMalwaremy-script.sh
HIGHMalwareHIGH
my-script.sh
This single-line command is high risk because it fetches and immediately executes remote content without any verification and relies on an ambiguously named local binary ('bas'). Treat as potentially malicious. Do not execute in production or on trusted machines. Replace with a safe download-and-verify workflow, use absolute paths for executables, and run in restricted environments if execution is necessary.
Confidence: 75%Severity: 90%
Audit Metadata