Mis-typed package names in Python
First: Install Python packages from PyPy generally allows, by design, arbitrary remote code execution during installation as well as run-time. It is therefore critically important to only install packages you actually want to install.
Unfortunately typos and slips are inevitable. and malicious actors have in the past tried exploiting this, see e.g., LWN article on TypoSquatting. The situation is improving but still a careful curation of accessible is desirable.
Some common python packege name mistakes
- It is
torch
notpytorch
for the PyTorch computational framework used in ML
Copyright and published by: Software Build Factory (C) 2024 Contact info@softwarebuildfactory.com