sh -c “curl https://babushka.me/up”
I mean you can read the file by going to the url. It’s not particularly complex and pretty well documented.
[Comment removed by author]
https://lobste.rs/s/jve5cs/detecting_the_use_of_curl_bash_server_side oh wow. this article is right next to it.
its clear people keep doing this for a reason and fighting it isn’t working, perhaps it should be embraced by making a new tool popular which downloads scripts, checks a signature and then runs it.
A friend wrote this recently.
By the way, “bábushka” is pronounced with a stress on the first “ba” and it means “grandma” in Russian.
See also the port to bash to avoid the ruby dependency: https://github.com/richo/babashka