deploy-coolify-cloud

No overt in-script malware behavior is present (no eval/exec of remote text, no credential handling, no exfiltration, no persistence beyond installing the CLI binary). However, the script performs a high-impact supply-chain action: it downloads and installs an unverified remote executable from a release artifact without checksum/signature validation, and it extracts an untrusted tarball without additional safety checks. The primary risk is that a compromised release artifact (or equivalent supply-chain compromise) would result in the user running a malicious CLI installed by this script.