deploy-tidb-aws

No explicit malicious payload is visible in this fragment, but it performs a high-risk supply-chain action: it downloads and immediately executes two remote installer scripts via `curl ... | sh` without integrity verification or version/commit pinning (including use of a `master` raw endpoint). It also overwrites HAProxy’s system configuration from a local file and restarts the service, which can be risky if that config is tampered with. Treat this as a significant review/containment item despite the lack of obvious malware commands in the snippet.