pypi
Security Risk Profile
86
/100
criticalSecurity Risk Score
Comprehensive risk assessment based on 19 vulnerabilities, EPSS scores, exploitation status, and remediation availability.
📅 Data spans from July 22, 2020 to present
19
Total CVEs
16
Critical+High
1
Exploited
15
Unpatched
Threat Assessment
Avg CVSS
9.7
Base severity
Avg EPSS
0%
Exploit probability
Unpatched
15
Critical/High
Risk Level
86/100
critical
⚠️ 1 Active Exploits
Severity Distribution
Critical
15High
1Medium
0Low
0Exploit Likelihood
>50% chance
020-50%
05-20%
0<5%
0Age Distribution
Common Weaknesses (CWE)
1
Buffer Overflow
1
Most Affected Products
1. PyPI Rootinteractive Pypi3
2. PyPI PyPI2
3. PyPI SoopSocks1
4. Python Package Index malicious PyPi packages1
5. npm crypto-encrypt-ts1
Recent Vulnerabilities
See more →https://seclists.org/oss-sec/2025/q3/250
unknown
malwain SoopSocks package on PyPi
9/30/2025🔧 No Patch
https://www.bleepingcomputer.com/news/security/malicious-pypi-packages-abuse-gmail-websockets-to-hijack-systems/
unknown
Malicious PyPI packages abuse Gmail, websockets to hijack systems
5/1/2025⚠ Exploited🔧 No Patch
https://www.bleepingcomputer.com/news/security/japan-warns-of-malicious-pypi-packages-created-by-north-korean-hackers/
unknown
Japan warns of malicious PyPi packages created by North Korean hackers
2/28/2024🔧 No Patch
CVE-2022-34500
CVSS 9.8critical
7/22/2022🔧 No Patch
CVE-2022-34501
CVSS 9.8critical
7/22/2022🔧 No Patch
CVE-2022-34056
CVSS 9.8critical
6/24/2022🔧 No Patch
CVE-2022-34055
CVSS 9.8critical
6/24/2022🔧 No Patch
CVE-2022-34054
CVSS 9.8critical
6/24/2022🔧 No Patch
CVE-2022-34053
CVSS 9.8critical
6/24/2022🔧 No Patch
CVE-2022-33004
CVSS 9.8critical
6/24/2022🔧 No Patch
Monitor pypi in Real-Time
Get instant alerts when new vulnerabilities are discovered. Stay ahead of security threats with SecAlerts.