When I run this apt-get install package_name
in SSH, the package is installed, but from which site?
Is it http://packages.debian.org ?
I know in ruby when you run gem intall xxx
, the gem is downloaded from rubygems.org. Not that long ago, the site was hacked and the hackers installed a payload in 1 gem. It is possible to find the gems at github and see what is going on. Rubygems also have a status.rubygems.org. Is there any similar for debian packages?