Ringing in Chaos: How TeamPCP Weaponized the Telnyx Python SDK

Reported 31 Mar 2026 by otx · Severity: medium

TeamPCP uploaded malicious versions of the telnyx Python SDK to PyPI, compromising a package with 750,000 monthly downloads. The attack uses a three-stage architecture: a trojanized package triggers a platform-specific loader, which downloads a second-stage payload hidden in a WA