Devs unknowingly use “malicious” modules snuck into official Python repository Code packages available in PyPI contained modified installation scripts.

Do you folks prefer to work with a packaged CPAN module/ Ruby Gem / whatever, or just install the basic package and handle anything else you need outside the package management? Seems like the pre ...