[pmoriarty]

Or like Apple's App Store or the Google Play Store?

All of these, along with those package managers have had malware posted to them.