FYI: there is empty package at https://pypi.org/project/pinecone-io/

[niki-sp]

This can lead to attacks

[Alek99]

Hi, Im not sure if I am following our package is pynecone-io, not pinecone-io

[Alek99]

The other package is not related to us so we have no control over it

[FHU-yezi]

He means if someone upload bad code to this fake package, and user has a typo in their command, hacker can run any code they want.