Is this a problem with Python package management too? If not, what distinguishes Python from NPM or makes it more resistant etc?

Yes. But Python is less popular so it isn't targeted as often.