Malicious Telnyx SDK Versions Uploaded to PyPI

Security researchers have uncovered a supply chain attack on the Telnyx Python software development kit, where hackers known as TeamPCP uploaded malicious versions to the Python Package Index, potentially exposing sensitive credentials from thousands of developers' systems.

The compromise occurred on March 27, 2026, when TeamPCP published versions 4.87.1 and 4.87.2 of the Telnyx package to PyPI, a popular repository for Python software. The initial version, released at 03:51 UTC, contained a nonfunctional payload due to an error, which the attackers corrected in the follow-up release at 04:07 UTC. The Telnyx SDK, used to integrate communication services such as VoIP, SMS, and IoT connectivity into applications, boasts over 740,000 monthly downloads. Researchers from firms including Socket, Endor Labs, and Aikido Security attributed the attack to TeamPCP based on matching encryption schemes, RSA keys