TL;DR: This powershell script attempts to steal popular Dogecoin wallets, but doesn’t execute any malicious code otherwise. The scary thing about this is that

TL;DR: This powershell script attempts to steal popular Dogecoin wallets, but doesn’t execute any malicious code otherwise. The scary thing about this is that on the MacOS/Linux side, *so* many large open-source projects are norming piping arbitrary shell scripts from the Internet into Bash. Homebrew is the biggest culprit of this. In other words, they are making it okay to just run “curl | bash” to install something without inspecting the scripts first. Given that _many_ engineers in the enterprise perform copy-paste-driven-development, this is a huge social engineering attack waiting to happen. In Windows land, you can disable arbitrary code execution through Invoke-RestMethod and Invoke-WebResponse by way of PowerShell policies, which were introduced in PowerShell version 2 (i.e. forever ago). In Linux, I’m not sure how you can work around “curl | bash” forking.