Had a discussion about XCodeGhost: “Couldn't Apple detect that?” (pep-project.org)