{"id":166627,"date":"2026-03-29T11:12:54","date_gmt":"2026-03-29T09:12:54","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/komprometacziya-pypi-paketa-telnyx"},"modified":"2026-03-29T11:12:54","modified_gmt":"2026-03-29T09:12:54","slug":"komprometacziya-pypi-paketa-telnyx","status":"publish","type":"post","link":"https:\/\/prohoster.info\/sq\/blog\/news\/komprometacziya-pypi-paketa-telnyx","title":{"rendered":"Komprometimi i paket\u00ebs PyPI Telnyx","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

Zhvilluesit e platform\u00ebs VoIP Telnyx t\u00eb paralajm\u00ebrojn\u00eb p\u00ebrdoruesit p\u00ebr komprometimin e paket\u00ebs telnyx n\u00eb depot PyPI, e cila ka 756 mij\u00eb shkarkime n\u00eb muaj dhe ofron SDK p\u00ebr akses n\u00eb API-n\u00eb Telnyx nga programet n\u00eb gjuh\u00ebn Python. M\u00eb 27 Mars, sulmuesit arrit\u00ebn t\u00eb publikojn\u00eb dy versione t\u00eb d\u00ebmshme telnyx 4.87.1 dhe 4.87.2, duke fituar akses n\u00eb PyPI pas kapjes s\u00eb kredencialeve t\u00eb menaxherit. Versionet e d\u00ebmshme u shp\u00ebrndan\u00eb nga ora 6:51 deri n\u00eb 13:13 (MSK), pas s\u00eb cil\u00ebs u bllokuan nga administrata e PyPI. Infrastruktura, API, sh\u00ebrbimet vokale dhe platforma Telnyx nuk u d\u00ebmbean. <\/p>\n

Komprometimi u realizua gjat\u00eb nj\u00eb sulmi m\u00eb t\u00eb gjer\u00eb t\u00eb zinxhirit t\u00eb furnizimit nga TeamPCP, gjat\u00eb t\u00eb cilit u komprometuan paketa Python LiteLLM dhe Trivy, si dhe u integrua kod i d\u00ebmsh\u00ebm n\u00eb shtes\u00ebn OpenVSX Checkmarx dhe u fut nj\u00eb krimb i d\u00ebmsh\u00ebm n\u00eb 68 paketa n\u00eb depot NPM. \u00c7el\u00ebsi RSA i p\u00ebrdorur p\u00ebr enkriptimin e t\u00eb dh\u00ebnave t\u00eb d\u00ebrguara p\u00ebrputhej me \u00e7el\u00ebsat e p\u00ebrdorur n\u00eb sulme t\u00eb tjera nga grupi TeamPCP. <\/p>\n

N\u00eb versionet e formuara nga sulmuesit ishte integruar nj\u00eb kod keqdash\u00ebs, i cili ishte p\u00ebrfshir\u00eb n\u00eb skedarin _client.py<\/em> dhe aktivizohet kur moduli importohet. Pas aktivizimit, server\u00ebsh<\/a> sulmuesit shkarkuan nj\u00eb skedar zanor ringtone.wav p\u00ebr sistemet Unix-like dhe hangup.wav p\u00ebr Windows. K\u00ebto skedar\u00eb u luajt\u00ebn me sukses si z\u00ebra, por p\u00ebrmbanin menaxher\u00eb t\u00eb fsheht\u00eb t\u00eb d\u00ebmsh\u00ebm t\u00eb integruar p\u00ebrmes steganografis\u00eb. <\/p>\n

N\u00eb platform\u00ebn Windows, procesori i keqdash\u00ebs ishte ruajtur n\u00eb sistem si %APPDATA%Microsoft0Windows0Start Menu0Programs0Startup0msbuild.exe<\/em> dhe ndizhej me secilin hyrje. N\u00eb macOS dhe Linux, u kryen k\u00ebrkimi dhe d\u00ebrgimi i \u00e7el\u00ebsave SSH, kredencialeve, p\u00ebrmbajtjes s\u00eb variablave t\u00eb mjedisit, tokeneve t\u00eb aksesit n\u00eb API, parametrave t\u00eb lidhjes me sh\u00ebrbimet cloud AWS, GCP, Azure dhe K8s, \u00e7el\u00ebsave t\u00eb portofol\u00ebve kriptografik\u00eb, fjal\u00ebkalimeve p\u00ebr DBMS, etj. T\u00eb dh\u00ebnat e zbuluara u enkriptuan duke p\u00ebrdorur algoritme AES-256-CBC + RSA-4096 dhe u d\u00ebrguan me HTTP POST n\u00eb nj\u00eb host t\u00eb jasht\u00ebm.
\n
Burimi: opennet.ru<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

\u0420\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u0438 VoIP-\u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u044b Telnyx \u043f\u0440\u0435\u0434\u0443\u043f\u0440\u0435\u0434\u0438\u043b\u0438 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439 \u043e \u043a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0430\u0446\u0438\u0438 \u043f\u0430\u043a\u0435\u0442\u0430 telnyx \u0432 \u0440\u0435\u043f\u043e\u0437\u0438\u0442\u043e\u0440\u0438\u0438 PyPI, \u043d\u0430\u0441\u0447\u0438\u0442\u044b\u0432\u0430\u044e\u0449\u0435\u0433\u043e 756 \u0442\u044b\u0441\u044f\u0447 \u0437\u0430\u0433\u0440\u0443\u0437\u043e\u043a \u0432 \u043c\u0435\u0441\u044f\u0446 \u0438 \u043f\u0440\u0435\u0434\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u044e\u0449\u0435\u0433\u043e SDK \u0434\u043b\u044f \u043e\u0431\u0440\u0430\u0449\u0435\u043d\u0438\u044f \u043a API Telnyx \u0438\u0437 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c \u043d\u0430 \u044f\u0437\u044b\u043a\u0435 Python. 27 \u043c\u0430\u0440\u0442\u0430 \u0430\u0442\u0430\u043a\u0443\u044e\u0449\u0438\u0435 \u0441\u043c\u043e\u0433\u043b\u0438 \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u0442\u044c \u0434\u0432\u0430 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0445 \u0432\u044b\u043f\u0443\u0441\u043a\u0430 telnyx 4.87.1 \u0438 4.87.2, \u043f\u043e\u043b\u0443\u0447\u0438\u0432 \u0434\u043e\u0441\u0442\u0443\u043f \u043a PyPI \u043f\u043e\u0441\u043b\u0435 \u0437\u0430\u0445\u0432\u0430\u0442\u0430 \u0443\u0447\u0451\u0442\u043d\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445 \u0441\u043e\u043f\u0440\u043e\u0432\u043e\u0436\u0434\u0430\u044e\u0449\u0435\u0433\u043e. \u0412\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0435 \u0432\u0435\u0440\u0441\u0438\u0438 \u0440\u0430\u0441\u043f\u0440\u043e\u0441\u0442\u0440\u0430\u043d\u044f\u043b\u0438\u0441\u044c […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":8,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-166627","post","type-post","status-publish","format-standard","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47Komprometimi i paket\u00ebs PyPI Telnyx | ProHoster","description":"Zhvilluesit e platform\u00ebs VoIP Telnyx t\u00eb paralajm\u00ebrojn\u00eb p\u00ebrdoruesit p\u00ebr komprometimin e paket\u00ebs telnyx n\u00eb depot PyPI, e cila ka 756 mij\u00eb shkarkime n\u00eb muaj dhe ofron SDK p\u00ebr akses n\u00eb API-n\u00eb Telnyx nga programet.","canonical_url":"https:\/\/prohoster.info\/sq\/blog\/news\/komprometacziya-pypi-paketa-telnyx","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"sq_AL","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u041a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0430\u0446\u0438\u044f PyPI-\u043f\u0430\u043a\u0435\u0442\u0430 Telnyx | ProHoster","og:description":"\u0420\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u0438 VoIP-\u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u044b Telnyx \u043f\u0440\u0435\u0434\u0443\u043f\u0440\u0435\u0434\u0438\u043b\u0438 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439 \u043e \u043a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0430\u0446\u0438\u0438 \u043f\u0430\u043a\u0435\u0442\u0430 telnyx \u0432 \u0440\u0435\u043f\u043e\u0437\u0438\u0442\u043e\u0440\u0438\u0438 PyPI, \u043d\u0430\u0441\u0447\u0438\u0442\u044b\u0432\u0430\u044e\u0449\u0435\u0433\u043e 756 \u0442\u044b\u0441\u044f\u0447 \u0437\u0430\u0433\u0440\u0443\u0437\u043e\u043a \u0432 \u043c\u0435\u0441\u044f\u0446 \u0438 \u043f\u0440\u0435\u0434\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u044e\u0449\u0435\u0433\u043e SDK \u0434\u043b\u044f \u043e\u0431\u0440\u0430\u0449\u0435\u043d\u0438\u044f \u043a API Telnyx \u0438\u0437 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c.","og:url":"https:\/\/prohoster.info\/sq\/blog\/news\/komprometacziya-pypi-paketa-telnyx","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2026-03-29T09:12:54+00:00","article:modified_time":"2026-03-29T09:12:54+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":[],"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/posts\/166627","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/users\/8"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/comments?post=166627"}],"version-history":[{"count":1,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/posts\/166627\/revisions"}],"predecessor-version":[{"id":168112,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/posts\/166627\/revisions\/168112"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/media?parent=166627"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/categories?post=166627"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/tags?post=166627"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}