Major compromise of the telnyx PyPI library could put millions of users at risk

World Password Day 2025.

---

• JFrog reports Telnyx PyPI package was poisoned with malware by TeamPCP
• Malicious update delivered hidden .wav payload that deployed infostealer and persistence mechanisms
• Users advised to downgrade, block C2 communication, rotate credentials, and scan for persistence