Of course the secondary opt-in user repo with unvetted package maintainers is infected with malware, it’d be a miracle if it weren’t! They warn as much in the docs. Use at your own risk, or package and maintain it yourself, because you’re likely not finding it packaged more reliably elsewhere.
And I love Debian, but if you think the Debian repos with 30,000+ packages and 1000+ community maintainers aren’t also infected with malware…
There hasn’t been a single reported incident so far. So, as far as we know… No. They aren’t infected.
And I trust the community of elders that take care of the Debian distro. They have been reliable and solid. They don’t just throw anything at the users on Stable. Even Testing is considered safer than most distributions.
Of course the secondary opt-in user repo with unvetted package maintainers is infected with malware, it’d be a miracle if it weren’t! They warn as much in the docs. Use at your own risk, or package and maintain it yourself, because you’re likely not finding it packaged more reliably elsewhere.
And I love Debian, but if you think the Debian repos with 30,000+ packages and 1000+ community maintainers aren’t also infected with malware…
There hasn’t been a single reported incident so far. So, as far as we know… No. They aren’t infected.
And I trust the community of elders that take care of the Debian distro. They have been reliable and solid. They don’t just throw anything at the users on Stable. Even Testing is considered safer than most distributions.