{"action":"No fix published. Pin and monitor.","affected":[{"introduced":"4.87.1","last_affected":"4.87.2"}],"component":"telnyx","cve_ids":[],"ecosystem":"PyPI","exploited":false,"fixed_versions":[],"ghsa_id":"GHSA-955r-262c-33jc","id":"tcs_01M5KF9V0CS7ZT3EM6Y7EE1G0F","modified_at":"2026-04-02T13:44:29.615206622Z","published_at":"2026-03-30T19:15:30Z","references":["https://osv.dev/vulnerability/GHSA-955r-262c-33jc","https://github.com/team-telnyx/telnyx-python/security/advisories/GHSA-955r-262c-33jc","https://github.com/team-telnyx/telnyx-python/issues/235","https://github.com/team-telnyx/telnyx-python","https://ramimac.me/teampcp","https://www.endorlabs.com/learn/teampcp-strikes-again-telnyx-compromised-three-days-after-litellm"],"severity":{"label":"critical"},"sources":[{"source":"osv","source_id":"GHSA-955r-262c-33jc","url":"https://osv.dev/vulnerability/GHSA-955r-262c-33jc"}],"summary":"Telnyx has malicious code in PyPI versions 4.87.1 and 4.87.2"}