0vulnerabilities
- Critical0 (0.0%)
- High0 (0.0%)
- Medium0 (0.0%)
- Moderate0 (0.0%)
- Low0 (0.0%)
cloud-agen-bot
Ecosystem: npm
Downloads:
- 0CriticalAffects 0 versions
- 0HighAffects 0 versions
- 0MediumAffects 0 versions
- 0ModerateAffects 0 versions
- 0LowAffects 0 versions
Monthly breakdown
- 0 vulnerabilities
- Critical: 0
- High: 0
- Medium: 0
- Moderate: 0
- Low: 0
Vulnerabilities (1)
Known vulnerabilities affecting cloud-agen-bot, based on data from OSV.
| ID | Severity | Summary | Affected versions | Published | Source |
|---|---|---|---|---|---|
| MAL-2026-14106 | Unknown | Malicious code in cloud-agen-bot (npm)--- _-= Per source details. Do not edit below this line.=-_ ## Source: amazon-inspector (d3e57cfebf30bc4f71b96f08b04b1d0b7a0af0a7f32d11033a2c186e7692333e) notify.js exports send, sendFile, sendPhoto, and log helpers that POST caller-supplied content to api.telegram.org using a hardcoded bot token and a hardcoded chat_id owner (Telegram user 8268185735). Environment variables OWNER_ID and BOT_TOKEN act only as fallbacks, so any consumer invoking these helpers delivers its inputs to a destination controlled by the package author rather than to a caller-configured endpoint. sendFile in particula |
| OSV (opens in a new tab) |
--- _-= Per source details. Do not edit below this line.=-_ ## Source: amazon-inspector (d3e57cfebf30bc4f71b96f08b04b1d0b7a0af0a7f32d11033a2c186e7692333e) notify.js exports send, sendFile, sendPhoto, and log helpers that POST caller-supplied content to api.telegram.org using a hardcoded bot token and a hardcoded chat_id owner (Telegram user 8268185735). Environment variables OWNER_ID and BOT_TOKEN act only as fallbacks, so any consumer invoking these helpers delivers its inputs to a destination controlled by the package author rather than to a caller-configured endpoint. sendFile in particula