💡Why??

To empower anyone to start threat hunting for malicious packages on PyPI

That's it.

Threat actors uploading malware on PyPI often utilize typo squatting or name squatting to trick users into installing their malicious package. CSAPP aims to prevent this through early detection of said packages.

The 2022 December Pytorch incident is a great example of name squatting and you can find plenty of articles for malicious packages typo squatting on names of popular packages.

If you want to learn more about my process for creating this tool, then please read my blog post.