Mis-typed package names in Python

First: Install Python packages from PyPy generally allows, by design, arbitrary remote code execution during installation as well as run-time. It is therefore critically important to only install packages you actually want to install.

Unfortunately typos and slips are inevitable. and malicious actors have in the past tried exploiting this, see e.g., LWN article on TypoSquatting. The situation is improving but still a careful curation of accessible is desirable.

Some common python packege name mistakes

  1. It is torch not pytorch for the PyTorch computational framework used in ML

Copyright and published by: Software Build Factory (C) 2024 Contact info@softwarebuildfactory.com