Telnyx has malicious code in PyPI versions 4.87.1 and 4.87.2
## Summary
On March 27, 2026, a threat actor used compromised PyPI credentials to publish malicious versions 4.87.1 and 4.87.2 of the `telnyx` Python package directly to PyPI. These versions contain credential-stealing malware and were not published through the legitimate GitHub release pipeline.
## Exposure Window
| Version | Published (UTC) | Quarantined (UTC) | Exposure |
|---------|-----------------|-------------------|----------|
| 4.87.1 (broken) | 2026-03-27 03:51 | 2026-03-27 10:13 | 6h 22m |
| 4.87.2 (functional) | 2026-03-27 04:07 | 2026-03-27 10:13 | 6h 6m |
**Both versions were quarantined by PyPI at 2026-03-27 10:13 UTC.**
Two telnyx versions published containing credential harvesting malware
After an API token exposure from an exploited Trivy dependency,
two new releases of `telnyx` were uploaded to PyPI containing automatically activated malware,
harvesting sensitive credentials and files, and exfiltrating to a remote API.
Compromised versions execute code during importing the `telnyx` module through modifications in `_client.py`.
The code downloads the next stages from endpoints on the host 83.142.209[.]203, encoded in WAV files.
On Windows hosts, the malicious executable is placed in
`%APPDATA%\Microsoft\Windows\Start Menu\Programs\Startup\msbuild.exe`
for persistence and executed.
On other systems, the payload is a Pyth