telnyx (PyPI)

Known vulnerabilities and malicious package reports for telnyx on PyPI, live from OSV, with CISA KEV exploitation status and EPSS scores.

Known package reports

1 malicious package report and 2 vulnerabilities returned by OSV. Check a specific version to see which reports apply.

If you installed a reported malicious release, remove it and rotate the credentials that machine could access. Upgrading does not undo code that already ran.

MAL-2026-2254: Malicious package report

Malicious code in telnyx (PyPI)

Published 2026-03-27.

Updated 2026-03-27.

Reported affected releases: 4.87.1, 4.87.2.

GHSA-955r-262c-33jc: Vulnerability

Telnyx has malicious code in PyPI versions 4.87.1 and 4.87.2

Published 2026-03-30.

Updated 2026-04-02.

Affected ranges: introduced 4.87.1, last_affected 4.87.2.

Severity: CRITICAL.

PYSEC-2026-3: Vulnerability

Two telnyx versions published containing credential harvesting malware

Published 2026-03-27.

Updated 2026-06-28.

Reported affected releases: 4.87.1, 4.87.2.

Source: OSV, including OpenSSF malicious-package reports and GitHub advisories. No known report is not proof a package is safe.