When I run this in SSH:
apt-get install package_name
Then the package is installed. But from which site? Is it http://packages.debian.org
I know in ruby when you run gem intall xxx the gem is downloaded from rubygems.org. And not that long ago the site was hacked and the hackers installed a payload in 1 gem. It is possible to find the gems at github and see what is going on. Rubygems have also a status.rubygems.org. Is there any similar to debian packages?