&gt; Hello scdf!<p>&gt; That was a bad idea. Don&#x27;t copy code from websites you don&#x27;t trust!<p>Or indeed, download software from websites you don&#x27;t trust.<p>I guess the worry would be that hackers would, as an example, take over brew.sh and do bad stuff with installation url. As opposed to taking over brew.sh (in an alternate world where brew.sh hosts a dmg file or something) and hosting an entirely different file.<p>Bar the relative ease of hiding bad stuff in copy paste compared to making a fake dmg file, this seems to be basically the same situation no?