Question

I am still new to Perl. Since BEGIN blocks are run during compilation can’t a virus spread or data loss occur from simply compiling? Does Perl do anything to stop it? If so does it mean the code in BEGIN blocks may act differently outside of it?

Answer 1

Yes to all these questions. The Eclipse IDE was vulnerable to this. It discussed in more detail here.

As with all software, you should avoid downloading and running anything from a source you do not trust. CPAN is generally trustworthy; although I am not aware of anyone intentionally releasing rogue code to CPAN, it’s possible it has happened.

You can avoid running code during compile checks with the $^C flag, e.g.:

BEGIN { load_data_from_db() unless $^C; }