I Built a Supply Chain Scanner for Python — pip Has the Same Problem as npm

Every week there's a new npm supply chain attack story. But here's the thing nobody talks about: PyPI...