Package impersonation at https://pypi.org/project/modular-ai/

[ematejska]

Originally filed in MAX repo at: #224 by @guidorice. Moving here for past mojo/max repo merge.

Where is the problem?

https://pypi.org/project/modular-ai/

What can we do better?

There appears to be someone squatting here: https://pypi.org/project/modular-ai/

The package "modular-ai" on PyPI appears to be an example of what's often called "package impersonation" or "brand impersonation" in the context of software repositories. This is similar to typosquatting, but instead of using a misspelled name, it's using a name that seems official or related to a known brand or project. (claude)

Maybe PyPi has a reconciliation process for project names?

Anything else?

No response