Even if you don't actually audit the source, you can at least check the checksums. A malicious host (or a malicious actor who has compromised a trusted host) c

Even if you don't actually audit the source, you can at least check the checksums. A malicious host (or a malicious actor who has compromised a trusted host) can detect that you're piping to bash in a few ways, and then by modifying the response, they're executing commands undetectably outside your shell history, potentially setting up reverse shells, installing rootkits etc. If you're doing it in a sealed environment... Still yikes honestly. I would prefer acquiring software from auditable sources.