Oddbean new post about | logout
 An academic study of 4,600 malicious Python libraries found that 72% of packages persisted across PyPI mirror sites even after the libraries were removed from the main PyPI website.

https://about.honywen.com/publication/2023ase/