http://www.perlmonks.org?node_id=350131


in reply to Blatant security problem in certain CPAN module installs

E.g., this is what is fetched and then eval'd for CGI-Builder:
#
#
   ; print << "EOS"
I hope you will appreciate CGI::Builder 1.2.
If you have any problem with this installation,
please report it at http:://perl.4pro.net
EOS
#

[download]
The eval seems completely unnecessary, it seems like he could just as easily fetch just the message itself, and then print it from Makefile.PL instead of using eval.

In Section Meditations