{"id":166627,"date":"2026-03-29T11:12:54","date_gmt":"2026-03-29T09:12:54","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/komprometacziya-pypi-paketa-telnyx"},"modified":"2026-03-29T11:12:54","modified_gmt":"2026-03-29T09:12:54","slug":"komprometacziya-pypi-paketa-telnyx","status":"publish","type":"post","link":"https:\/\/prohoster.info\/sq\/blog\/novosti-interneta\/komprometacziya-pypi-paketa-telnyx","title":{"rendered":"Komprometimi i paket\u00ebs PyPI Telnyx","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

Zhvilluesit e platform\u00ebs VoIP Telnyx informuan p\u00ebrdoruesit p\u00ebr komprometimin e paket\u00ebs telnyx n\u00eb depozitorin\u00eb PyPI, e cila ka rreth 756 mij\u00eb shkarkime n\u00eb muaj dhe ofron SDK p\u00ebr t\u00eb aksesuar API-n\u00eb Telnyx nga programet n\u00eb gjuh\u00ebn Python. M\u00eb 27 mars, sulmuesit arrit\u00ebn t\u00eb publikojn\u00eb dy versione t\u00eb d\u00ebmshme telnyx 4.87.1 dhe 4.87.2, duke marr\u00eb akses n\u00eb PyPI pas kapjes s\u00eb kredencialeve t\u00eb mbik\u00ebqyr\u00ebsit. Versionet e d\u00ebmshme u shp\u00ebrndan\u00eb nga ora 6:51 deri n\u00eb 13:13 (MSK), pas s\u00eb cil\u00ebs u bllokuan nga administrata e PyPI. Infrastrukturat, API, sh\u00ebrbimet vokale dhe platforma Telnyx nuk p\u00ebsuan d\u00ebme. <\/p>\n

Komprometimi u realizua gjat\u00eb nj\u00eb sulmi m\u00eb t\u00eb gjer\u00eb t\u00eb zinxhirit t\u00eb furnizimit nga TeamPCP, gjat\u00eb t\u00eb cilit u komprometuan paketa Python LiteLLM dhe Trivy, si edhe u integrua kod i d\u00ebmsh\u00ebm n\u00eb shtes\u00ebn OpenVSX t\u00eb Checkmarx dhe u infiltrua nj\u00eb virus n\u00eb 68 paketa n\u00eb depozitorin\u00eb NPM. \u00c7el\u00ebsi RSA i p\u00ebrdorur p\u00ebr enkriptimin e t\u00eb dh\u00ebnave t\u00eb d\u00ebrguara p\u00ebrputhej me \u00e7el\u00ebsat q\u00eb ishin p\u00ebrdorur n\u00eb sulme t\u00eb tjera t\u00eb grupit TeamPCP. <\/p>\n

N\u00eb versionet e formuara nga sulmuesit ishte e integruar nj\u00eb kode e d\u00ebmshme, e cila ishte e inkorporuar n\u00eb skedarin «_client.py» dhe u aktivizua gjat\u00eb importit t\u00eb modulit. Pasi u aktivizua, servera<\/a> sulmuesit shkarkonin nj\u00eb skedar audio ringtone.wav p\u00ebr sistemet Unix dhe hangup.wav p\u00ebr Windows. K\u00ebto skedar\u00eb u riprodhuan me sukses si audio, por p\u00ebrmbanin menaxher\u00eb t\u00eb d\u00ebmsh\u00ebm t\u00eb fshehur duke p\u00ebrdorur steganografi. <\/p>\n

N\u00eb platform\u00ebn Windows, procesori i d\u00ebmsh\u00ebm ruhej n\u00eb sistem si «%APPDATA%\Microsoft\Windows\Start Menu\Programs\Startup\msbuild.exe» dhe aktivizohej me \u00e7do hyrje. N\u00eb macOS dhe Linux, u realizua k\u00ebrkesa dhe d\u00ebrgimi i \u00e7el\u00ebsave SSH, t\u00eb dh\u00ebnave t\u00eb identifikimit, p\u00ebrmbajtjes s\u00eb variableve t\u00eb mjedisit, tokave t\u00eb aksesit API, parametrave t\u00eb lidhjes me sh\u00ebrbimet cloud AWS, GCP, Azure dhe K8s, \u00e7el\u00ebsave t\u00eb portofol\u00ebve kriptografik\u00eb, fjal\u00ebkalimeve p\u00ebr DBMS t\u00eb tjera, etj. T\u00eb dh\u00ebnat e zbuluara u enkriptuan duke p\u00ebrdorur algoritmet AES-256-CBC + RSA-4096 dhe u d\u00ebrguan me nj\u00eb k\u00ebrkes\u00eb HTTP POST n\u00eb nj\u00eb host t\u00eb jasht\u00ebm.
\n
Burimi: opennet.ru<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

\u0420\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u0438 VoIP-\u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u044b Telnyx \u043f\u0440\u0435\u0434\u0443\u043f\u0440\u0435\u0434\u0438\u043b\u0438 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439 \u043e \u043a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0430\u0446\u0438\u0438 \u043f\u0430\u043a\u0435\u0442\u0430 telnyx \u0432 \u0440\u0435\u043f\u043e\u0437\u0438\u0442\u043e\u0440\u0438\u0438 PyPI, \u043d\u0430\u0441\u0447\u0438\u0442\u044b\u0432\u0430\u044e\u0449\u0435\u0433\u043e 756 \u0442\u044b\u0441\u044f\u0447 \u0437\u0430\u0433\u0440\u0443\u0437\u043e\u043a \u0432 \u043c\u0435\u0441\u044f\u0446 \u0438 \u043f\u0440\u0435\u0434\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u044e\u0449\u0435\u0433\u043e SDK \u0434\u043b\u044f \u043e\u0431\u0440\u0430\u0449\u0435\u043d\u0438\u044f \u043a API Telnyx \u0438\u0437 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c \u043d\u0430 \u044f\u0437\u044b\u043a\u0435 Python. 27 \u043c\u0430\u0440\u0442\u0430 \u0430\u0442\u0430\u043a\u0443\u044e\u0449\u0438\u0435 \u0441\u043c\u043e\u0433\u043b\u0438 \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u0442\u044c \u0434\u0432\u0430 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0445 \u0432\u044b\u043f\u0443\u0441\u043a\u0430 telnyx 4.87.1 \u0438 4.87.2, \u043f\u043e\u043b\u0443\u0447\u0438\u0432 \u0434\u043e\u0441\u0442\u0443\u043f \u043a PyPI \u043f\u043e\u0441\u043b\u0435 \u0437\u0430\u0445\u0432\u0430\u0442\u0430 \u0443\u0447\u0451\u0442\u043d\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445 \u0441\u043e\u043f\u0440\u043e\u0432\u043e\u0436\u0434\u0430\u044e\u0449\u0435\u0433\u043e. \u0412\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0435 \u0432\u0435\u0440\u0441\u0438\u0438 \u0440\u0430\u0441\u043f\u0440\u043e\u0441\u0442\u0440\u0430\u043d\u044f\u043b\u0438\u0441\u044c […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":8,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-166627","post","type-post","status-publish","format-standard","hentry","category-novosti-interneta"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47Komprometimi i paket\u00ebs PyPI t\u00eb Telnyx | ProHoster","description":"Zhvilluesit e platform\u00ebs VoIP Telnyx informuan p\u00ebrdoruesit p\u00ebr komprometimin e paket\u00ebs telnyx n\u00eb depozitorin\u00eb PyPI, e cila ka rreth 756 mij\u00eb shkarkime n\u00eb muaj dhe ofron SDK p\u00ebr t\u00eb aksesuar API-n\u00eb Telnyx nga programet n\u00eb gjuh\u00ebn Python. M\u00eb 27 mars, sulmuesit arrit\u00ebn t\u00eb publikojn\u00eb dy versione t\u00eb d\u00ebmshme telnyx 4.87.1 dhe 4.87.2, duke marr\u00eb akses n\u00eb PyPI pas kapjes s\u00eb kredencialeve t\u00eb mbik\u00ebqyr\u00ebsit. Versionet e d\u00ebmshme u shp\u00ebrndan\u00eb","canonical_url":"https:\/\/prohoster.info\/sq\/blog\/novosti-interneta\/komprometacziya-pypi-paketa-telnyx","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"sq_AL","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u041a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0430\u0446\u0438\u044f PyPI-\u043f\u0430\u043a\u0435\u0442\u0430 Telnyx | ProHoster","og:description":"\u0420\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u0438 VoIP-\u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u044b Telnyx \u043f\u0440\u0435\u0434\u0443\u043f\u0440\u0435\u0434\u0438\u043b\u0438 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439 \u043e \u043a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0430\u0446\u0438\u0438 \u043f\u0430\u043a\u0435\u0442\u0430 telnyx \u0432 \u0440\u0435\u043f\u043e\u0437\u0438\u0442\u043e\u0440\u0438\u0438 PyPI, \u043d\u0430\u0441\u0447\u0438\u0442\u044b\u0432\u0430\u044e\u0449\u0435\u0433\u043e 756 \u0442\u044b\u0441\u044f\u0447 \u0437\u0430\u0433\u0440\u0443\u0437\u043e\u043a \u0432 \u043c\u0435\u0441\u044f\u0446 \u0438 \u043f\u0440\u0435\u0434\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u044e\u0449\u0435\u0433\u043e SDK \u0434\u043b\u044f \u043e\u0431\u0440\u0430\u0449\u0435\u043d\u0438\u044f \u043a API Telnyx \u0438\u0437 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c \u043d\u0430 \u044f\u0437\u044b\u043a\u0435 Python. 27 \u043c\u0430\u0440\u0442\u0430 \u0430\u0442\u0430\u043a\u0443\u044e\u0449\u0438\u0435 \u0441\u043c\u043e\u0433\u043b\u0438 \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u0442\u044c \u0434\u0432\u0430 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0445 \u0432\u044b\u043f\u0443\u0441\u043a\u0430 telnyx 4.87.1 \u0438 4.87.2, \u043f\u043e\u043b\u0443\u0447\u0438\u0432 \u0434\u043e\u0441\u0442\u0443\u043f \u043a PyPI \u043f\u043e\u0441\u043b\u0435 \u0437\u0430\u0445\u0432\u0430\u0442\u0430 \u0443\u0447\u0451\u0442\u043d\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445 \u0441\u043e\u043f\u0440\u043e\u0432\u043e\u0436\u0434\u0430\u044e\u0449\u0435\u0433\u043e. \u0412\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0435 \u0432\u0435\u0440\u0441\u0438\u0438 \u0440\u0430\u0441\u043f\u0440\u043e\u0441\u0442\u0440\u0430\u043d\u044f\u043b\u0438\u0441\u044c","og:url":"https:\/\/prohoster.info\/sq\/blog\/novosti-interneta\/komprometacziya-pypi-paketa-telnyx","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2026-03-29T09:12:54+00:00","article:modified_time":"2026-03-29T09:12:54+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":[],"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/posts\/166627","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/users\/8"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/comments?post=166627"}],"version-history":[{"count":1,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/posts\/166627\/revisions"}],"predecessor-version":[{"id":168112,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/posts\/166627\/revisions\/168112"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/media?parent=166627"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/categories?post=166627"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/tags?post=166627"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}