TeamPCP Targets Telnyx Package in Latest PyPI Software Supply Chain Attack

TeamPCP compromised the official Telnyx Python SDK on PyPI (versions 4.87.1 and 4.87.2), publishing trojanized packages that execute during installation to steal SSH private keys and bash history and exfiltrate them to an attacker-controlled endpoint; researchers from Socket and Endor Labs attribute the issue to a compromised maintainer account and warn this reflects a maturing supply-chain attack methodology with ties to broader ransomware activity.