updated curl
move mal to the online package