Similarly, running &quot;make&quot; in the directory of a freshly downloaded repo is dangerous too. It&#x27;s really difficult to check all code running on our behalf and to quantify the risks.<p>If someone take control of a popular git repo and push a malicious build script. How many people will be affected before the fix ?<p>But this doesn&#x27;t seem to happen very often too.