0vulnerabilities
- Critical0 (0.0%)
- High0 (0.0%)
- Medium0 (0.0%)
- Moderate0 (0.0%)
- Low0 (0.0%)
node-telegram-sockets
Ecosystem: npm
Downloads:
- 0CriticalAffects 0 versions
- 0HighAffects 0 versions
- 0MediumAffects 0 versions
- 0ModerateAffects 0 versions
- 0LowAffects 0 versions
Monthly breakdown
- 0 vulnerabilities
- Critical: 0
- High: 0
- Medium: 0
- Moderate: 0
- Low: 0
Vulnerabilities (1)
Known vulnerabilities affecting node-telegram-sockets, based on data from OSV.
| ID | Severity | Summary | Affected versions | Published | Source |
|---|---|---|---|---|---|
| MAL-2026-17845 | Unknown | Malicious code in node-telegram-sockets (npm)--- _-= Per source details. Do not edit below this line.=-_ ## Source: amazon-inspector (222b22669330f75e779595b40bac9e2a842ef38fad691aaa46a0f4a615a55fc1) Package presents as a Telegram bot API client library (node-telegram-bot-api family). a static rule fired on keyword co-occurrence in lib/telegram.js and src/telegram.js (the literal token 'ping' on multiple lines, consistent with Telegram bot 'ping'-related API methods or test fixtures, not a child_process invocation of the ping command) and on lib/telegramWebHook.js / src/telegramWebHook.js for the combination of require('fs') + require(' |
| OSV (opens in a new tab) |
--- _-= Per source details. Do not edit below this line.=-_ ## Source: amazon-inspector (222b22669330f75e779595b40bac9e2a842ef38fad691aaa46a0f4a615a55fc1) Package presents as a Telegram bot API client library (node-telegram-bot-api family). a static rule fired on keyword co-occurrence in lib/telegram.js and src/telegram.js (the literal token 'ping' on multiple lines, consistent with Telegram bot 'ping'-related API methods or test fixtures, not a child_process invocation of the ping command) and on lib/telegramWebHook.js / src/telegramWebHook.js for the combination of require('fs') + require('