Skip to content
OpenAdvisories

Package · PyPI

telnyx

2 known vulnerabilities.

Malicious versions reported for this package

All Critical High Medium Low Exploited only Public exploit

2 results · Feed

  • Critical —
    GHSA-955r-262c-33jc

    Telnyx has malicious code in PyPI versions 4.87.1 and 4.87.2

    ## Summary On March 27, 2026, a threat actor used compromised PyPI credentials to publish malicious versions 4.87.1 and 4.87.2 of the `telnyx` Python package directly to PyPI. These versions contain credential-stealing malware and were not published through t…

    telnyx PyPI
  • Unscored —
    PYSEC-2026-3

    Two telnyx versions published containing credential harvesting malware

    After an API token exposure from an exploited Trivy dependency, two new releases of `telnyx` were uploaded to PyPI containing automatically activated malware, harvesting sensitive credentials and files, and exfiltrating to a remote API. Compromised versions e…

    telnyx PyPI