Inventing package names and hoping they exist

In an early scene in the film M3GAN 2.0, 12-year-old Cady is seen using a Node.JS-like REPL to bring in a package called "morality" and getting an error that it doesn't exist in the system.

What is not shown is, if that system included uncurated third-party packages in its search, morality could have done literally anything (i.e. a "trojan horse" which is also mentioned in the film).

Thankfully I managed to get there first in PyPI, so if you import morality there you'll just get this message. But please be careful with third-party libraries!

(The NPM library already had a package called morality since 2020 which was some proof-of-concept code for an academic paper, innocuous but probably isn't what you think.)


(You can read The M3GAN Files on AO3 or Royal Road or Wattpad)