Will Large-Scale Automated Scanning Stop Malware on OSS Repositories?

Using PyPI as a case study, the talk examines the limits of automated malware scanning for open-source package repositories. It considers false positives, the role of independent researchers, and the needs of repository maintainers.