Will the --secure option protect against this: http://incolumitas.com/2016/06/08/typosquatting-package-managers/