Google is serving sponsored links to a Homebrew site clone that has a cURL command to malware. The URL for this site is one letter different than the official site.
https://eligrey.com/blog/link-fraud/
This is not the first time it happens, and surely not the last time.
And oh yeah, they are a privacy tool too, as long websites don’t go as far as Badness Enumeration | PrivSec - A practical approach to Privacy and Security