Beware of install scripts in tarballs

Andrew's blog