PyPI Compromised: telnyx Packages Weaponized with Steganography-Hidden Malware

Malicious versions of the telnyx Python package on PyPI employed sophisticated steganography to embed malware within WAV audio files, evading standard network inspection tools. The attack delivered platform-specific payloads that steal credentials on Linux/macOS and establish persistence on Windows, while the same threat actor was recently linked to the litellm compromise. This incident underscores how supply chain attackers are rapidly evolving tactics to bypass security measures and infiltrate development environments.