a deployment plugin shipping raw bash command strings off your machine. "actively defend against it" is just normal hygiene