Sorry you are getting downvoted for being one of today’s 10,000

Wow, thanks for this. That is very helpful context. And thanks for your original post too, or I’d never have asked.

it is detectable […] server side, if you download the script [vs] pipe it into a shell

I presume you mean if you download the script in a browser, vs using curl to retrieve it, where presumably you are piping it to a shell. Because yeah, the user agent is going to reveal which tool downloaded it, of course. You can use curl to simply retrieve the file without executing it though.

Or are you suggesting that curl makes something different in its request to the server for the file, depending on whether it is saving the file to disk vs streaming it to a pipe?

The P stands for plunder.