TeamPCP’s Telnyx Attack Marks a Shift in Tactics Beyond LiteLLM

TeamPCP published two malicious Telnyx Python SDK releases to PyPI (v4.87.1 and v4.87.2) that execute on import and use split-file injection and WAV audio steganography to deliver a credential-stealing payload; the campaign reuses cryptographic/exfiltration tooling from a prior LiteLLM compromise and expands targeting to Windows with a persistence mechanism (msbuild.exe in user Startup). The packages were quarantined by PyPI after ~6.5 hours of exposure; the report outlines technical analysis, IOCs, and defensive recommendations such as downgrading to 4.87.0, hashing/pinning dependencies, and monitoring for WAV downloads from suspicious IPs.