# What methods should we implement to detect malicious content?

**URL:** <https://discuss.python.org/t/what-methods-should-we-implement-to-detect-malicious-content/2240>\
**Category:** PyPI Q4 RFI\
**Created:** [September 3, 2019, 2:32pm UTC](https://discuss.python.org/t/what-methods-should-we-implement-to-detect-malicious-content/2240 "2019-09-03T14:32:37Z")\
**Posts on this page:** 1\
**Showing post:** 2

<div class="post-metadata">

**Author:** ![Fdion](https://avatars.discourse-cdn.com/v4/letter/f/ed8c4c/32.png) [@Fdion](https://discuss.python.org/u/Fdion)\
**Post date:** [September 4, 2019, 2:44am UTC](https://discuss.python.org/t/what-methods-should-we-implement-to-detect-malicious-content/2240/2 "2019-09-04T02:44:07Z")

</div>

Methods are going to depend a lot on what is an acceptable false positive rate, false negative rate, how much resources are available for training and for live detection (and how much of a delay is acceptable). At least ballpark figures are needed.

I ran into typosquatting of python packages at a customer site (local pypi) last year, and I’ve gone from regex and soundex to building models to detect this, but I suspect something lightweight would be needed for real-time.

---

_[View the full topic](https://discuss.python.org/t/what-methods-should-we-implement-to-detect-malicious-content/2240)._