TeamPCP Uses Fake Ringtone File in Tainted Telnyx SDK to Steal Credentials

Researchers attribute a supply-chain compromise of the Telnyx Python SDK to the TeamPCP group: two malicious package versions (4.87.1 and 4.87.2) contained code in _client.py that downloaded a scrambled `ringtone.wav` which executed to search for SSH keys, cloud credentials, and cryptocurrency wallets. The tainted packages were available on 27 March 2026 and affected users who ran `pip install telnyx` during that window; Telnyx confirmed their infrastructure was not breached and advised reverting to 4.87.0 and rotating secrets.