Well there's theoretically a very easy way to do it: static analysis of the source code, especially if it's open source like in DroidScript's case :) Does it l

Well there's theoretically a very easy way to do it: static analysis of the source code, especially if it's open source like in DroidScript's case :) Does it look like any of the references to the malware domain could come from the app itself? Then it's the app's fault. Otherwise, it's the user's fault. You can also use Python to write ad bots and malware, but that's not a sufficient reason to ban the whole Python language (or any other programming language).