We're probably splitting hair but if your concern is DNS hijacking, then that still applies to pretty much anything else you do with Github, and by the way, most of your creds have already probably been stolen via fake logon portals in that case.
I agree, people should check what they are piping in to sh, but they should also read all of the source code they are pulling and compiling from Github.
I agree, people should check what they are piping in to sh, but they should also read all of the source code they are pulling and compiling from Github.