Telnyx Python SDK

Reported Context (2)

LiteLLM AI proxy package, TeamPCP struck again. On March 27, 2026, two malicious versions of the Telnyx Python SDK, a cloud communications library with over 700,000 downloads in February, were published to PyPI. The TeamPCP’s Telnyx Supply-Chain Attack Adds WAV Steganography and Windows Persistence
On March 27, 2026 at roughly 03:51 UTC, threat actor TeamPCP uploaded two malicious versions (4.87.1 and 4.87.2) of the telnyx Python SDK to PyPI. TeamPCP Used Malicious Telnyx Python SDK Versions to Steal Credentials

Threat Actors (2)

MITRE ATT&CK (17)

Vendors (1)

Products (5)

Industries (1)

Countries (1)

Note: Related entities, including threat actors, malware, CVEs, MITRE ATT&CK techniques, vendors, products, tools, countries, and industries, are shown when they appear in the same reporting. Their presence does not necessarily mean they were targeted, compromised, vulnerable, responsible for the activity, or directly involved in the incident.