A Telnyx VoIP platform developers warned users about the compromise of the telnyx package in the PyPI repository, which has 756,000 downloads per month and provides an SDK for accessing the Telnyx API from Python programs. On March 27, attackers managed to publish two malicious releases, telnyx 4.87.1 and 4.87.2, gaining access to PyPI after capturing the maintainer's credentials. The malicious versions were distributed from 6:51 to 13:13 (MSK) and were subsequently blocked by the PyPI administration. The infrastructure, API, voice services, and the Telnyx platform were not affected.
The compromise was part of a larger TeamPCP supply chain attack, during which the Python packages LiteLLM and Trivy were compromised, malicious code was integrated into the Checkmarx OpenVSX extension, and a worm was injected into 68 packages in the NPM repository. The RSA key used to encrypt the transmitted data matched the keys used in other attacks by the TeamPCP group.
The versions created by the attackers contained malicious code embedded in the file "_client.py" and was activated upon importing the module. After activation, the szerverek attackers downloaded the audio file ringtone.wav for Unix-like systems and hangup.wav for Windows. These files played successfully as audio but contained hidden malicious handlers integrated through steganography.
On the Windows platform, the malicious handler was saved to the system as "%APPDATA%\Microsoft\Windows\Start Menu\Programs\Startup\msbuild.exe" and ran at each login. On macOS and Linux, it searched for and sent SSH keys, credentials, contents of environment variables, API access tokens, cloud service connection parameters for AWS, GCP, Azure, and K8s, cryptowallet keys, database passwords, etc. The discovered data was encrypted using AES-256-CBC + RSA-4096 algorithms and sent via HTTP POST request to an external host.
Forrás: opennet.ru
