Hint: Hundreds of malicious npm and PyPI packages spotted - Machine learning models are unreliable but that doesn't prevent them from also being useful at times.