CampaignPublished 30 Mar 2026Updated 29 Apr 2026

TeamPCP’s Telnyx Attack Marks a Shift in Tactics Beyond LiteLLM

Source AlienVault OTX General

Description

TeamPCP launched a sophisticated attack on the Telnyx Python SDK, publishing malicious versions 4.87.1 and 4.87.2 to PyPI. The attack represents an evolution from their previous LiteLLM campaign, incorporating WAV-based steganography, split-file code injection, and expanded platform support. The payload, activated on import, uses stealthy techniques to download and execute credential-stealing malware across Linux, macOS, and Windows systems. Key changes include the use of audio steganography to hide malicious code, improved evasion through split-file injection, and the addition of Windows support with Startup folder persistence. The attackers shifted from HTTPS to plaintext HTTP infrastructure, potentially exposing their activities to network monitoring. Organizations are advised to downgrade to the last clean version and treat affected systems as compromised.

Impact

This supply-chain attack threatens organizations worldwide that use the Telnyx Python SDK, potentially compromising sensitive credentials across Linux, macOS, and Windows environments. Credential theft can lead to unauthorized access to critical systems, data breaches, lateral movement within networks, and further malware deployment. The multi-platform nature increases the scope of affected systems, including development, production, and CI/CD environments. The use of advanced evasion techniques such as audio steganography and split-file injection complicates detection and forensic efforts, increasing dwell time and risk of extensive compromise. Persistence on Windows systems via the Startup folder ensures malware survival across reboots, facilitating long-term access. The shift to plaintext HTTP C2 traffic could allow network defenders to detect and disrupt communications, but also indicates attackers’ confidence or operational constraints. The attack undermines trust in open-source supply chains, potentially impacting software development workflows and increasing operational costs due to remediation and incident response. Organizations may face regulatory and reputational damage if credential theft leads to data breaches or service disruptions.

Defensive guidance

1. Immediately downgrade the Telnyx Python SDK to the last known clean version prior to 4.87.1 and 4.87.2 to prevent further exposure. 2. Conduct comprehensive endpoint and network forensics to identify any signs of compromise, focusing on the presence of the identified malicious hashes and suspicious network traffic to IP 83.142.209.203. 3. Implement enhanced monitoring for unusual process behaviors, especially those involving audio file processing or unexpected network connections over plaintext HTTP. 4. Audit Windows systems for unauthorized persistence mechanisms, particularly in the Startup folder, and remove any suspicious entries. 5. Employ advanced threat detection tools capable of analyzing steganographic content and split-file injection patterns to improve detection capabilities. 6. Rotate all potentially compromised credentials and enforce multi-factor authentication to limit attacker access. 7. Educate development and DevOps teams on supply-chain risks and enforce strict package version controls and integrity verification (e.g., hash checks, signed packages). 8. Utilize network segmentation and egress filtering to limit malware communication channels. 9. Collaborate with threat intelligence providers to stay updated on emerging indicators and tactics from TeamPCP. 10. Consider deploying runtime application self-protection (RASP) or behavior-based anomaly detection within critical environments to detect malicious SDK behavior in real time.

Indicators of compromise

IP addresses 1

83.142.209.203

Hashes 6

5870a0bf82bbdf2687d8dce89dfa668f
4ce6ad55d8912aacc4ae4c572237131d0b7ba4b5
23b1ec58649170650110ecad96e5a9490d98146e105226a16d898fbe108139e5
7321caa303fe96ded0492c747d2f353c4f7d17185656fe292ab0a59e2bd0b8d9
ab4c4aebb52027bf3d2f6b2dcef593a1a2cff415774ea4711f7d6e0aa1451d4e
cd08115806662469bbedec4b03f8427b97c8a4b3bc1442dc18b72b4e19395fe3

Community reviews

Loading reviews…

Description

AI analysisMachine-generated, updated 30 Mar 2026, 21:53 UTC

MITRE ATT&CK techniques10 from threat tags

Technical details

Indicators of compromise

IP addresses 1

Hashes 6

Community reviews

Related threats