Back Cybersecuritynews

Telnyx PyPI Package With 742,000 downloads Compromised in TeamPCP Supply Chain Attack

Cybersecuritynews •Guru Baran • March 27, 2026

The official Telnyx Python SDK on PyPI was compromised this morning as part of an escalating, weeks-long supply chain campaign orchestrated by the threat actor group TeamPCP. Malicious versions 4.87.1 and 4.87.2 of the telnyx package were uploaded to PyPI at 03:51 UTC on March 27, 2026, with the payload executing silently at import time […]

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

LiteLLM Python Package Compromised in Major Supply Chain Attack by TeamPCP On March 24, 2026, two malicious versions of the LiteLLM Python package (1.82.7 and 1.82.8) were published on PyPI, containing credential-stealing malware. The attack, attributed to the TeamPCP threat group, exploited vulnerabilities in the CI/CD pipeline, specifically through the Trivy vulnerability scanner. The compromised versions were available for approximately two hours, potentially affecting millions of users given LiteLLM's 95 million monthly downloads. The malware is designed to harvest sensitive data such as SSH keys, cloud credentials, and Kubernetes secrets, and can establish persistence on affected systems. Security advisories have been issued, urging developers to check their installations and rotate any exposed credentials. The attack highlights the risks associated with supply chain vulnerabilities in open-source software. As of now, the malicious versions have been removed from PyPI, and the maintainers are managing the fallout. 53 sources 72

Extracted Entities

Telnyx PyPI Package With 742,000 downloads Compromised in TeamPCP Supply Chain Attack

The full story

Extracted Entities

Attack Types (1)

Companies (1)

MITRE ATT&CK (1)

Platforms (1)