On Ubuntu specifically, ensure that you are only installing packages from Cannonical's repositories or VERY trusted PPAs.