2026-03-27 · 2026-Q1
Telnyx PyPI Supply Chain Compromise
Should this run hold this key at all?
- Fixable
- Vendor patch
- Vendor response
- Patched
- In the wild
- Yes
- Actor
- Attacker
Target
Telnyx Python SDK
Impact
Credential harvester concealed in WAV audio file frame data; malicious code injected into telnyx/_client.py
Root cause
Telnyx PyPI token stolen during LiteLLM compromise; TeamPCP cascading attack
Sources
Catalog
Cite this: AgentProv incident record: Telnyx PyPI Supply Chain Compromise (2026-03-27). https://agentprov.com/incidents/2026-03-27-telnyx-pypi-supply-chain-compromise
Related
- Same event · 2026-03-24LiteLLM Supply Chain Attack by TeamPCPL1Credential
- Also L1 · 2026-10-21LiteLLM 1.107.0 on PyPI and Docker Ships a Credential Stealer That Runs at Every Python StartupL1Credential
- Also L1 · 2026-10-17OpenCode Console Breach Exposes Users' Stored OpenAI, Anthropic, and Google API KeysL1Credential