Telnyx Python SDK Compromised to Deliver Credential-Stealing Malware

Reported 28 Mar 2026 by otx · Severity: medium

A supply chain attack affecting the telnyx Python package on PyPI has been identified. Malicious versions 4.87.1 and 4.87.2 contained embedded credential-harvesting malware. The attack employs a three-stage runtime chain on Linux/macOS using audio steganography for delivery, in-m