Hi Personally I would recommend the usage of suspicious-source (from ubuntu-dev-tools?). I believe it already catches this, else asking them to catch it seems very reasonable.
~Niels -- To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org