Replying to @patterfloof@meow.social
@patterfloof @Li it was specifically the piping being detected, found the post again and its over 10 years old https://web.archive.org/web/20160419194042/https://www.idontplaydarts.com/2016/04/detecting-curl-pipe-bash-server-side/
web.archive.orgDetecting the use of "curl | bash" server side | Application SecurityAnother reason not to pipe from curl to bash. Detecting curl | bash serverside.

