One concern with ChatGPT suggesting python packages was that it suggests packages which are not in Pypi and opens up a vulnerability for typo-squatting and name-squatting attacks. On the NPM side this is quite a common attack vector, too.