Am I reading this correctly? There's only ~2k/470k packages containing malware on the PyPi registry? That seems exceptional. The registry maintainers must be w

Am I reading this correctly? There's only ~2k/470k packages containing malware on the PyPi registry? That seems exceptional. The registry maintainers must be working extremely hard on these problems.