Telnyx joins LiteLLM in latest PyPI package poisoning tied to Trivy breach

This briefing covers several active cybersecurity incidents: TeamPCP pushed malicious Telnyx Python SDK versions to PyPI to distribute a multi-stage infostealer (delivered and decoded from a .wav file), Telnyx recommends treating hosts running versions 4.87.1 or 4.87.2 as compromised and rotating exposed credentials; an alleged RedLine operator was extradited to the US on charges related to infostealer operations; LAPSUS$ published 2.66 GB of purported AstraZeneca data; and Oak Ridge National Laboratory published Photon, an exascale AI vulnerability discovery tool.