# Proposal of AI Powered Malware Package Scanner in PyPI **URL:** \ **Category:** Python Help\ **Created:** [October 4, 2025, 7:43am UTC](https://discuss.python.org/t/proposal-of-ai-powered-malware-package-scanner-in-pypi/104158 "2025-10-04T07:43:33Z")\ **Posts on this page:** 1\ **Showing post:** 12
**Author:** ![relunsec](https://sea2.discourse-cdn.com/flex002/user_avatar/discuss.python.org/relunsec/32/25981_2.png) [@relunsec](https://discuss.python.org/u/relunsec)\ **Post date:** [October 7, 2025, 6:12pm UTC](https://discuss.python.org/t/proposal-of-ai-powered-malware-package-scanner-in-pypi/104158/12 "2025-10-07T18:12:05Z")
Thank you all for the feedback. I understand now that there are significant concerns around feasibility, cost, and unintended consequences of implementing AI-based malware detection on PyPI. My goal wasn’t to expect others to build it on a whim, but rather to open the discussion around long-term solutions, especially with AI-assisted attacks becoming more advanced. I agree that human review is still essential, but I believe AI could play a supporting role—maybe starting small, like flagging obviously obfuscated code in popular projects. I’m considering starting a prototype to explore the practical challenges. If it turns out to be useful, maybe it could become a tool that maintainers could choose to use, rather than something built into PyPI directly. Thanks again for the honest replies—I appreciate the pushback, it helps shape a better understanding of the problem. If Possible you can implement GPG signing for Python packages at least i think --- _[View the full topic](https://discuss.python.org/t/proposal-of-ai-powered-malware-package-scanner-in-pypi/104158)._