Back News.Ycombinator

Telnyx Python SDK: Supply Chain Security Notice

News.Ycombinator • March 27, 2026

On March 27, 2026 at 03:51:28 UTC, two unauthorized versions of the Telnyx Python SDK were published to PyPI: versions 4.87.1 and 4.87.2. Both versions contained malicious code. Both were quarantined by 10:13 UTC the same day.

This incident is part of a broader supply chain campaign that has also affected Trivy, Checkmarx, and LiteLLM.

The Telnyx platform, APIs, and infrastructure were not compromised. This incident was limited to the PyPI distribution channel for the Python SDK.

Both versions have been removed from PyPI.

You may be affected if:

Run the following command:

If the version shown is 4.87.1 or 4.87.2, treat the environment as compromised.

Additional IOCs will be published as the investigation confirms them.

The Telnyx platform, voice services, messaging infrastructure, networking, SIP, AI inference, and all production APIs were not affected.

The SDK is a client library that wraps public APIs. It has no privileged access to Telnyx infrastructure. No customer data was accessed through this incident.

This attack is part of a multi-week supply chain campaign:

[email protected] if you have questions this incident or need assistance determining if your environment was affected.

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

LiteLLM Python Package Compromised in Major Supply Chain Attack by TeamPCP On March 24, 2026, two malicious versions of the LiteLLM Python package (1.82.7 and 1.82.8) were published on PyPI, containing credential-stealing malware. The attack, attributed to the TeamPCP threat group, exploited vulnerabilities in the CI/CD pipeline, specifically through the Trivy vulnerability scanner. The compromised versions were available for approximately two hours, potentially affecting millions of users given LiteLLM's 95 million monthly downloads. The malware is designed to harvest sensitive data such as SSH keys, cloud credentials, and Kubernetes secrets, and can establish persistence on affected systems. Security advisories have been issued, urging developers to check their installations and rotate any exposed credentials. The attack highlights the risks associated with supply chain vulnerabilities in open-source software. As of now, the malicious versions have been removed from PyPI, and the maintainers are managing the fallout. 53 sources 72

Extracted Entities

Telnyx Python SDK: Supply Chain Security Notice

The full story

Extracted Entities

Attack Types (1)

Companies (2)

MITRE ATT&CK (1)

Platforms (1)

Tools (2)