Who woulda thunk installing a Perl module could download stuff from the network and then run it when you weren't looking (well, Schwern did, a long time ago, I hear).
The PAUSE and CPAN admins wasted no time taking care of the problem.
If anyone sees anything like this in any other modules, please let us know at modules @ perl.org, or you can email me directly if you want to remain anonymous.