“Community” behind it is apparently originating in Berlin, and is now a “nonprofit foundation in Switzerland”, but has no publicly disclosed legal structure anymore.
“Community” behind it uses discord, but not revolt, matrix, simplex or others.
“Community” behind it uses twitter, but not mastodon.
Installing by piping from curl is pretty common and not a red flag in and of itself. Even Rust is installed this way. If you don’t trust the URL, you also shouldn’t trust any binary installers downloaded from that website.
This doesn’t pass the smell test.
curlinshshisbash[1]sh <(curl -sSf https://url.redacted/script)↩︎Installing by piping from curl is pretty common and not a red flag in and of itself. Even Rust is installed this way. If you don’t trust the URL, you also shouldn’t trust any binary installers downloaded from that website.
Rust is a red flag
Why?
Crates is insecure and, as pointed out above, so is piping curl to bash for installing rust Dev tools