I noticed this around homebrew install style key words. People blindly copy and paste a shel script that is given sudo on a fresh install. Seems pretty ideal setup for bad guys.

Yup, I was had by a malicious fake Homebrew site that had the #1 spot in Google thanks to it being an ad (a key fact that was very unclear at the time of browsing Google)