you can't get infected through the package manager if your language doesn't have a package manager :) turns out C and C++ were playing 4D chess all along