Back Feeds2.Feedburner

TeamPCP strikes again: Backdoored Telnyx PyPI package delivers malware

Feeds2.Feedburner •Zeljka Zorz • March 27, 2026

TeamPCP continues is supply chain compromise rampage, with telnyx on PyPI being the latest maliciously modified package. What happened? Telnyx is a widely used software development kit (SDK) for the Telnyx AI Voice Agent service. According to Endor Labs researchers, attackers backdoored the legitimate SDK code and published versions 4.87.1 and 4.87.2 of the package on the Python Package Index (PyPI), one shortly after the other. The malicious code wasn’t functional in the first version … More →

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

LiteLLM Python Package Compromised in Major Supply Chain Attack by TeamPCP On March 24, 2026, two malicious versions of the LiteLLM Python package (1.82.7 and 1.82.8) were published on PyPI, containing credential-stealing malware. The attack, attributed to the TeamPCP threat group, exploited vulnerabilities in the CI/CD pipeline, specifically through the Trivy vulnerability scanner. The compromised versions were available for approximately two hours, potentially affecting millions of users given LiteLLM's 95 million monthly downloads. The malware is designed to harvest sensitive data such as SSH keys, cloud credentials, and Kubernetes secrets, and can establish persistence on affected systems. Security advisories have been issued, urging developers to check their installations and rotate any exposed credentials. The attack highlights the risks associated with supply chain vulnerabilities in open-source software. As of now, the malicious versions have been removed from PyPI, and the maintainers are managing the fallout. 53 sources 72

Extracted Entities

TeamPCP strikes again: Backdoored Telnyx PyPI package delivers malware

The full story

Extracted Entities

Attack Types (2)

Companies (1)

MITRE ATT&CK (1)