Which versions of matplotlibe are malicious?

The following PyPI versions of matplotlibe are flagged malicious: 1.0.0. Treat any of these as compromised.

How do I remediate matplotlibe if I installed it?

matplotlibe is a typosquat — you almost certainly intended a legitimately-named package. Remove matplotlibe, install the correct package, and rotate any secrets exposed during the install since post-install scripts may have already run.

I already installed matplotlibe — how do I know if it already compromised me?

If matplotlibe was installed, its post-install payload may already have run. Removing the package does not undo that — check outbound connections and credential use from the install window onward.

Is matplotlibe part of a known attack campaign?

Yes — matplotlibe is associated with the 2025-05- yesyesyes campaign. Packages in the same campaign often share infrastructure and payloads, so check whether any related packages are also in your dependency tree.

How do I find matplotlibe across my projects, lockfiles, and CI pipelines?

Search your lockfiles and build artifacts for matplotlibe (version 1.0.0).

Malicious package

matplotlibePyPI

Advisory published May 26, 2025Updated Dec 12, 2025

matplotlibe is a confirmed malicious PyPI package (MAL-2025-191786) that typosquats a legitimate package to trick installs (malicious version 1.0.0). Do not install it — remove it immediately and rotate any exposed credentials.

Malicious code in matplotlibe (PyPI)

MAL-2025-191786

Immediate action

Remove the package, then rotate any secrets the build/runtime could reach.

pip uninstall matplotlibe

What this malware does

Clearly typosquatting packages, but no known malicious parts.

Category: PROBABLY_PENTEST - Packages looking like typical pentest packages, but also anything that looks like testing, exploring pre-prepared kits, research & co, with clearly low-harm possibilities.

Campaign: 2025-05- yesyesyes

Reasons (based on the campaign):

typosquatting

Malicious versions

1 flagged

1.0.0

Indicators of compromise (SHA-256)

f8d5c031507163d88d91b038d4d2bbd73565125b93059a5bb96243072445caec

082b8eb9ac76b7c5ec057f8c5f0aeff99b84841c33c50fb570874ff4e435375a

a039d815ef7ca48b52d2a53be83fce00ce9e8aefc20c4ad0003c97d9d61b84ea

Detection & response playbook

Typosquat

Find it
Search your lockfiles and build artifacts for matplotlibe (version 1.0.0).
If you installed it — respond
matplotlibe is a typosquat — you almost certainly intended a legitimately-named package. Remove matplotlibe, install the correct package, and rotate any secrets exposed during the install since post-install scripts may have already run.
Did it already run?
If matplotlibe was installed, its post-install payload may already have run. Removing the package does not undo that — check outbound connections and credential use from the install window onward.

Frequently asked questions

No. matplotlibe on PyPI has been identified as a malicious package (version 1.0.0 flagged). It should be removed immediately — do not install or keep it in your dependency tree.

Campaign

2025-05- yesyesyes

References

bad-packages.kam193.eu

Credits

Kamil Mańkowski (kam193)

Detect & block this

O3 blocks matplotlibe-class packages before install and in CI — and if it already ran, its runtime egress monitoring catches the malicious outbound activity and severs the channel.

Malware detection Runtime egress monitoring

Explore

All malware advisories How O3 detects malware Vulnerability database