Comment by windsurfer

Most of the users I know only get their software through their distros package manager. I think it would be quite tough to get malware in there, especially since most distros accept only free software.