Am I reading this correctly? There's only ~2k/470k packages containing malware on the PyPi registry?

That seems exceptional. The registry maintainers must be working extremely hard on these problems.