News Score: Score the News, Sort the News, Rewrite the Headlines

Popular telnyx package compromised on PyPI by TeamPCP

This morning's telnyx compromise is the latest move in what is now a weeks-long TeamPCP supply chain campaign crossing multiple ecosystems. Trivy. Checkmarx. LiteLLM. And now Telnyx on PyPI, uploaded hours ago at 03:51 UTC on March 27.The pattern is consistent: steal credentials from a trusted security tool, use those credentials to push malicious versions of whatever that tool had access to, collect whatever's running in the next environment, repeat.Where This Fits in the CampaignA quick recap ...

Read more at aikido.dev

© News Score  score the news, sort the news, rewrite the headlines