@kytta I know,- it just shows newcomers that this is something everybody does and it is supposed to be secure. But its not. It's dangerous and people should stop advertising it.

Imagine some website is hacked and people install packages this way only.

Nobody would recognize that their system is compromised.

We have a reason for package managers.