[otikik]

> The repos aren't themselves doing harm,

Yes they are. They are being used as delivery mechanism for malware.