[ddtaylor]

Like a package manager with maintainers, ie. Deb, RPM, etc.

[pmoriarty]

Or like Apple's App Store or the Google Play Store?

All of these, along with those package managers have had malware posted to them.