Kidding aside, most of the problem with the fake libraries could be solved if pypi namespace them per author, like GitHub does for repos.