The community will do plenty. First, the author of the malware
would be barraged by a blizzard of nasty emails. They would be hounded to the ends of the earth:). Second, I doubt very much
that it would really get by the volunteers that monitor PAUSE.
They do a great job, considering all the the work that is thrown on them. Third, as a cpantester, I've fine-tuned my firewall. If there's something not kosher going on, I'll get it and notify the appropriate people. I haven't had that problem as of yet. Fourth, it doesn't pay to fight the general
community consensus when it says you too can install CPAN
modules. After 17 years, it's time to get onboard, no?
in reply to Malware on CPAN