We tried doing this on PyPI a couple of years ago, and it produced a large number of false positives (too many to manually review). You can see the rules we tr

We tried doing this on PyPI a couple of years ago, and it produced a large number of false positives (too many to manually review). You can see the rules we tried here[1]. [1]: https://github.com/pypi/warehouse/blob/main/warehouse/malware/checks/setup_patterns/setup_py_rules.yara https://github.com/pypi/warehouse/blob/main/warehouse/malwar...