PyPI/telnyx: unknown
Two telnyx versions published containing credential harvesting malware
Action: No fix published. Pin and monitor.
Affected
No affected ranges in the source.
Fixed versions
No fixed version in the source.
Sources
- osv: PYSEC-2026-3
- https://inspector.pypi.io/project/telnyx/4.87.2/packages/3c/89/bff9e644b1076b96ba1e23deb2b7acffa9fe84166219ba9cb47cf356b7ec/telnyx-4.87.2.tar.gz/telnyx-4.87.2/src/telnyx/_client.py#line.7825
- https://github.com/team-telnyx/telnyx-python/issues/235
- https://www.endorlabs.com/learn/teampcp-strikes-again-telnyx-compromised-three-days-after-litellm
- https://www.aikido.dev/blog/telnyx-pypi-compromised-teampcp-canisterworm
published · modified · JSON