Often there is a need to use unofficial Linux software repositories (e.g. media codecs, wireless card drivers etc.) and hence the need to decide whether to trust them.
I am trying to figure out how much time I should be spending finding out about yet another repo that I consider using. How common is it for malicious Linux repos to pop up? Has it even ever happened?