Typosquatting in Package Managers (nesbitt.io)

I presume this kind of problems is almost mathematically non-existent until your tool's package registry grow a certain size. curious to learn how true that is.