The telnyx packages on PyPI have been compromised
Summary
LWN.net reports that compromised Telnyx Python packages 4.87.1 and 4.87.2 on PyPI contained malicious code, hidden in telnyx/_client.py, capable of fetching a second-stage binary and exfiltrating credentials. With the Telnyx package seeing massive downloads, this underscores the risk of supply chain attacks in open-source dependencies and the need for vigilant dependency management and incident response.