In this blog post I will show how:
17000 computers were forced to execute arbitrary code by typosquatting programming language packages/libraries
50% of these installations were conducted with administrative rights
Even highly security aware institutions (.gov and .mil hosts) fell victim to this attack
a typosquatting attack becomes wormable by mining the command history data of hosts
some good defenses against typosquatting package managers might look like

http://incolumitas.com/2016/06/08/typosquatting-package-managers/
tldr: So basically we create a fake package that has a similar name as a famous package on PyPi, Npmjs.com or rubygems.org. For example we could upload a package named reqeusts instead of the famous requests module.