Not to the same extent as NPM. Because Python has a good standard library and library authors are not deathly afraid of code duplication like JS devs, for example micro libraries like left-pad, is-even etc.
I honestly think a forced time spent in pre release (with some emergency break glass where community leaders manually review critical hotfixes) could mitigate 99% of the issues here. Linux packages have been around for ever and have fewer incidents mainly because of the long dev->release channel cooking time.
Can somebody drive this up the chain to people who administer npm?
You can reference that and leave the color commentary at the door.
Every ecosystem has this problem but NPM is the undisputed leader if you count all attacks.