As some of you pointed out already the problem is not limited to KDE-Look.org or KDE-Apps.org. It is easy to distribute malware via sourceforge, openSUSE buildService, Ubuntu PPAs, Firefox Extensions or other websites.

So we need a more general solution if we want to improve the security situation. I´m organizing a security BOF session at Camp KDE to discuss ideas like signing, network of trust, AppAmor and Sandboxing.

If you are interested please join us. Everybody is invited of course.

Thanks for the update Frank.