Hackers Backdoored the Telnyx Python Package to Hide Credential-Stealing Malware in Audio Files

The Telnyx Python package on PyPI was compromised by the TeamPCP threat group, which uploaded backdoored versions concealing credential-stealing malware within WAV audio files. The technique uses steganography to embed the payload in audio data, reflecting growing sophistication in supply chain attacks targeting developer toolchains. [Instagram] TeamPCP hackers compromised the official Telnyx package on PyPI, uploading malicious versions that hid credential-stealing malware inside WAV audio files. The attack used steganography to conceal the payload. Developers using the Python Package Index should audit their dependencies. [LinkedIn] The Telnyx Python package on PyPI was compromised by the TeamPCP threat group, which uploaded backdoored versions concealing credential-stealing malware within WAV audio files. The technique uses steganography embedded in audio data, reflecting a growing sophistication in supply chain attacks targeting developer toolchains. Security teams should audit Python dependencies and review Telnyx package versions installed in any environment.