My apologies, I thought they all eventually came from GitHub. I used the a[t-get console commands.
And I've only been doing this for a month, but this is the second time this has happened in that month. Is there any software best practices I can implement to prevent this? Should I be using source code only? Or just refuse updates once something is working?