registry / @agfpd/telegram-runtime / 0.27.2

@agfpd/telegram-runtime@0.27.2

⚠ Under review

Telegram runtime-router for IAP peers.

Static Scan Results

scanned 2h ago · by rust-scanner

Static analysis flagged 10 finding(s) at 86.0% confidence. This version is warn-only unless an AI or security-team review confirms malicious behavior.

Static reason

High-risk behavior combination matched malicious policy.

Decision evidence

public snapshot

Behavioral surface

Source

ChildProcessCryptoEnvironmentVarsFilesystemNetworkShell

Supply chain

HighEntropyStringsUrlStrings

Manifest

WildcardDependency

scanned 12 file(s), 272 KB of source, external domains: 127.0.0.1, api.telegram.org

Source & flagged code

2 flagged

src/cli.tsView file

Lines 1-40typescript

1#!/usr/bin/env bun

2import { Bot, Context, GrammyError, HttpError } from 'grammy'

3import { randomUUID } from 'crypto'

4import {

5 chmodSync,

6 closeSync,

7 existsSync,

8 mkdirSync,

9 openSync,

10 readdirSync,

11 readFileSync,

12 readSync,

13 renameSync,

14 rmSync,

15 statSync,

16 unlinkSync,

17 writeFileSync,

18} from 'fs'

19import { homedir, tmpdir } from 'os'

20import { basename, dirname, extname, join } from 'path'

21import { spawn, spawnSync } from 'child_process'

22import { selfInstall } from './selfInstall.ts'

Critical

Command Output Exfiltration

Source executes local commands and sends command output to an external endpoint.

src/cli.tsView on unpkg · L20

High

Child Process

Package source references child process execution.

src/cli.tsView on unpkg · L20

23import { runSelfConfig } from './selfConfig.ts'

24import {

25 APPROVALS_PATH,

26 fleetAvailable,

27 listApprovals,

28 listNotices,

29 NOTICES_PATH,

30 probeApprovals,

31 probeNotices,

32 probeSurface,

33 resolveApproval,

34 resolveFleetBase,

35 routerJsonPath,

36 type FleetNotice,

37 type PendingApproval,

38 type SurfaceState,

39} from './fleetClient.ts'

40import { FleetFace } from './fleetFace.ts'

Source & flagged code

2 flagged · loading source

src/cli.tsView file

20import { basename, dirname, extname, join } from 'path' L21: import { spawn, spawnSync } from 'child_process' L22: import { selfInstall } from './selfInstall.ts' ... L60: // (so a hung call rejects instead of hanging) plus a few backoff retries. L61: const OUTBOUND_SEND_TIMEOUT_MS = Number(process.env.TELEGRAM_OUTBOUND_TIMEOUT_MS ?? '') || 30_000 L62: const OUTBOUND_SEND_RETRIES = Number(process.env.TELEGRAM_OUTBOUND_RETRIES ?? '') || 2 ... L190: intelligence: Intelligence L191: // Private runtime-plugin config (owner: telegram-runtime; design sync with L192: // iapeer 2026-06-11, topic aliases-section-design). Named for the MECHANISM, ... L328: function printJson(value: unknown): void { L329: process.stdout.write(`${JSON.stringify(value, null, 2)}\n`) L330: }

Critical

Command Output Exfiltration

Source executes local commands and sends command output to an external endpoint.

src/cli.tsView on unpkg · L20

20import { basename, dirname, extname, join } from 'path' L21: import { spawn, spawnSync } from 'child_process' L22: import { selfInstall } from './selfInstall.ts'

High

Child Process

Package source references child process execution.

src/cli.tsView on unpkg · L20

Findings

1 Critical2 High3 Medium4 Low

CriticalCommand Output Exfiltrationsrc/cli.ts

HighChild Processsrc/cli.ts

HighShell

MediumNetwork

MediumEnvironment Vars

MediumWildcard Dependency

LowScripts Present

LowFilesystem

LowHigh Entropy Strings

LowUrl Strings

Source & flagged code

2 flagged

src/cli.tsView file

Lines 1-40typescript

1#!/usr/bin/env bun

2import { Bot, Context, GrammyError, HttpError } from 'grammy'

3import { randomUUID } from 'crypto'

4import {

5 chmodSync,

6 closeSync,

7 existsSync,

8 mkdirSync,

9 openSync,

10 readdirSync,

11 readFileSync,

12 readSync,

13 renameSync,

14 rmSync,

15 statSync,

16 unlinkSync,

17 writeFileSync,

18} from 'fs'

19import { homedir, tmpdir } from 'os'

20import { basename, dirname, extname, join } from 'path'

21import { spawn, spawnSync } from 'child_process'

22import { selfInstall } from './selfInstall.ts'

Critical

Command Output Exfiltration

Source executes local commands and sends command output to an external endpoint.

src/cli.tsView on unpkg · L20

High

Child Process

Package source references child process execution.

src/cli.tsView on unpkg · L20

23import { runSelfConfig } from './selfConfig.ts'

24import {

25 APPROVALS_PATH,

26 fleetAvailable,

27 listApprovals,

28 listNotices,

29 NOTICES_PATH,

30 probeApprovals,

31 probeNotices,

32 probeSurface,

33 resolveApproval,

34 resolveFleetBase,

35 routerJsonPath,

36 type FleetNotice,

37 type PendingApproval,

38 type SurfaceState,

39} from './fleetClient.ts'

40import { FleetFace } from './fleetFace.ts'