Telnyx package compromised on PyPI

It's 7am Friday. Someone just forwarded you the security advisory in Slack. Telnyx 4.87.1 and 4.87.2 were backdoored — malicious code, live from 3:51am UTC yesterday until 10am. You have a dozen environments and no idea which ones pulled it during that window. You're staring at your screen, coffee going cold, thinking: where do I even start.

Install the Telnyx Exposure Scanner and tell your claw "check all our environments for the compromised Telnyx package from yesterday." It digs through pip logs, lock files, and deployment records for the exact version fingerprints, maps every environment that was live during the 03:51–10:13 UTC exposure window, and hands you a clean containment checklist — upgrade commands, rollback steps, and a ready-to-send incident summary. Your manager walks over. You say: already handled it. They blink.

Unlike pasting a CVE link into a chat window and hoping for something useful, this skill knows the exact two version numbers, the exact six-hour danger window, and walks containment end-to-end without you having to stitch it together yourself.

WHAT YOU GET

• SKILL.md — teaches your claw to find and kill compromised packages
• Exposure report — every environment, every version, every timestamp flagged
• Containment checklist — exact commands, no guesswork

Drop it in your OpenClaw. No setup. Works in seconds.