fix: Command injection via curl pipe to bash

[mrwind-up-bird]

AutoFix: Command injection via curl pipe to bash

Category: security
Severity: critical

Issue

The script encourages users to download and execute code directly from a remote URL using 'curl -sSL | bash'. This bypasses all security verification and allows arbitrary code execution if the URL is compromised or malicious. Attackers could serve malicious scripts that compromise the entire server.

Fix

Replaced the dangerous 'curl | bash' pattern with a secure two-step process that downloads the script first, allows manual verification, and then executes it. This prevents arbitrary code execution from compromised URLs and follows security best practices by encouraging users to review scripts before execution.

---

Generated by nyxCore AutoFix