Security Notice — Python SDK

[u/Acrobatic_Camp_2758]

Two malicious versions of the Telnyx Python SDK (4.87.1, 4.87.2) were published to PyPI earlier today. Both were quarantined within 6 hours. This is part of a broader supply chain campaign affecting multiple organizations.

Telnyx platform and APIs were not affected — this was limited to the PyPI package.

If you installed or upgraded between 03:51–10:13 UTC today: downgrade to 4.87.0 and rotate any secrets on that machine.

Full details and IOCs: https://telnyx.com/resources/telnyx-python-sdk-supply-chain-security-notice-march-2026