--- title: "PyPI packages are increasing rapidly" url: https://daily.dev/posts/pypi-packages-are-increasing-rapidly-jmpgu4wcm source_url: https://rushter.com/blog/pypi-packages type: article source: "Planet Python" published: 2026-05-17T13:46:45.596Z updated: 2026-05-17T13:47:05.559Z tags: ["security", "python", "vibe-coding"] reading_time: 3 upvotes: 0 comments: 0 language: en --- > ## Documentation Index > Fetch the complete documentation index at: https://daily.dev/llms.txt > Use this file to discover all available pages before exploring further. # PyPI packages are increasing rapidly **[Planet Python](https://daily.dev/sources/planetpython)** · 3 min read · 0 upvotes · 0 comments ## Summary PyPI package publication rates have surged 30% since 2025, largely driven by AI-generated (vibe-coded) packages. Many of these packages misuse eval, exec, and subprocess in ways that mimic malicious code patterns, creating false positives for security tools monitoring the ecosystem. The author, who maintains a malicious package detection library called hexora, highlights the strain this places on PyPI maintainers — a non-profit relying on donations — as storage and download volumes grow. Additionally, some packages are published hundreds of times per day, which is flagged as abusive behavior that complicates supply chain security monitoring. ## Full article daily.dev links to this article rather than hosting it. Read it at the original source: ## Similar posts on daily.dev - [GitHub Actions security in Python packages](https://daily.dev/posts/github-actions-security-in-python-packages-ngn5b2ads) · Andrew Nesbitt · 0 upvotes · 0 comments - [Python package security in 2026](https://daily.dev/posts/python-package-security-in-2026-caqcr90if) · CSO Online · 0 upvotes · 0 comments --- Tags: [#security](https://daily.dev/tags/security), [#python](https://daily.dev/tags/python), [#vibe-coding](https://daily.dev/tags/vibe-coding) [View this post on daily.dev](https://daily.dev/posts/pypi-packages-are-increasing-rapidly-jmpgu4wcm)