Trojan horses in Makefile.PL

brian_d_foy on 2004-05-04T14:15:44

Who woulda thunk installing a Perl module could download stuff from the network and then run it when you weren't looking (well, Schwern did, a long time ago, I hear).

The PAUSE and CPAN admins wasted no time taking care of the problem.

If anyone sees anything like this in any other modules, please let us know at modules @ perl.org, or you can email me directly if you want to remain anonymous.


It's being fixed

runrig on 2004-05-04T23:42:27

This was discussed on perlmonks and the author is taking care of it.