registry / @deadragdoll/tellymcp / 0.0.16

@deadragdoll/tellymcp@0.0.16

TellyMCP - Telegram control plane for MCP-connected coding agents

Static Scan Results

scanned 2h ago · by rust-scanner

Static analysis flagged 17 finding(s) at 72.0% confidence. This version is warn-only unless an AI or security-team review confirms malicious behavior.

Static reason

One or more suspicious static signals were detected.

Decision evidence

public snapshot

Behavioral surface

Source

ChildProcessCryptoDynamicRequireEnvironmentVarsFilesystemNetworkWebSocket

Supply chain

HighEntropyStringsUrlStrings

ManifestNo manifest risk signals triggered.

scanned 202 file(s), 1.85 MB of source, external domains: 127.0.0.1, api.telegram.org, builder.undoo.ru, chatgpt.com, claude.ai, gateway.local, github.com, registry.npmjs.org, standalone.local, telegram.org, telly.example.com, your-host.example

Source & flagged code

9 flagged

package.jsonView file

Lines 21-61json

21 "VERSION.md",

22 "CHANGELOG.md",

23 "TOOLS.md",

24 ".env.example.client",

25 ".env.example.gateway"

26 ],

27 "publishConfig": {

28 "access": "public"

29 },

30 "keywords": [

31 "telegram",

32 "mcp",

33 "human-in-the-loop",

34 "bot",

35 "agent"

36 ],

37 "_moduleAliases": {

38 "@src": "src"

39 },

40 "scripts": {

41 "postinstall": "node ./scripts/postinstall.js",

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg · L41

Medium

Ambiguous Install Lifecycle Script

Install-time lifecycle script is not statically allowlisted and needs review.

package.jsonView on unpkg · L41

42 "build:extensions": "node ./packages/firefox-attach-extension/scripts/build.mjs && node ./packages/chrome-attach-extension/scripts/build.mjs",

43 "prepack": "yarn build && yarn build:extensions",

44 "prepublishOnly": "yarn build && yarn build:extensions && yarn lint && yarn test",

45 "mcp:local": "codex mcp add telegramHuman --url http://127.0.0.1:8787/mcp",

46 "dev:gw": "TS_NODE_TRANSPILE_ONLY=1 TS_NODE_EXPERIMENTAL_RESOLVER=1 NODE_OPTIONS=--openssl-legacy-provider ts-node ./node_modules/moleculer/bin/moleculer-runner.js src/services --config src/moleculer.config.ts --envfile /opt/tellymcp-gateway/.env-gateway --hot --mask \"**/*.service.ts\"",

47 "dev:builder": "TS_NODE_TRANSPILE_ONLY=1 TS_NODE_EXPERIMENTAL_RESOLVER=1 NODE_OPTIONS=--openssl-legacy-provider ts-node ./node_modules/moleculer/bin/moleculer-runner.js src/services --config src/moleculer.config.ts --envfile ./.env-builder --hot --mask \"**/*.service.ts\"",

48 "dev:gw:telegram": "TS_NODE_TRANSPILE_ONLY=1 TS_NODE_EXPERIMENTAL_RESOLVER=1 NODE_OPTIONS=--openssl-legacy-provider ts-node ./node_modules/moleculer/bin/moleculer-runner.js src/services/features/telegram-mcp --config src/moleculer.config.ts --envfile ./.env-dev --hot --mask \"**/*.service.ts\"",

49 "dev:client": "TS_NODE_TRANSPILE_ONLY=1 TS_NODE_EXPERIMENTAL_RESOLVER=1 NODE_OPTIONS=--openssl-legacy-provider ts-node ./node_modules/moleculer/bin/moleculer-runner.js src/services --config src/moleculer.config.ts --envfile ./.env-client --hot --mask \"**/*.service.ts\"",

50 "dev:sh": "TELLYMCP_SOURCE_RUNTIME=true tsx src/cli.ts run --env ./.env-client",

51 "dev": "yarn dev:gw",

52 "dev:watch": "yarn dev:gw",

53 "dev:service": "yarn dev:gw",

54 "build": "rm -rf dist && tsc -p tsconfig.json && tsc-alias -p tsconfig.json",

55 "start": "yarn start:gw",

56 "start:gw": "node ./node_modules/moleculer/bin/moleculer-runner.js dist/services --config dist/moleculer.config.js --mask \"**/*.service.js\"",

57 "start:gw:telegram": "node ./node_modules/moleculer/bin/moleculer-runner.js dist/services/features/telegram-mcp --config dist/moleculer.config.js --mask \"**/*.service.js\"",

58 "lint": "eslint .",

59 "format": "prettier --write .",

60 "format:check": "prettier --check .",

61 "test": "vitest run",

.env.example.gatewayView file

Lines 38-78text

38# TELEGRAM_WEBHOOK_PATH=/telegram/webhook

39# TELEGRAM_WEBHOOK_PUBLIC_URL=https://your-domain.example/api/telegram/webhook

40# TELEGRAM_WEBHOOK_SECRET=change_me_webhook_secret

41# TELEGRAM_WEBHOOK_TRACE=false

42# TELEGRAM_WEBHOOK_DROP_PENDING_UPDATES=false

44# Optional static bearer auth for internal MCP clients.

45# MCP_HTTP_BEARER_TOKEN=

46MCP_HTTP_ENABLE_DEBUG_ROUTES=false

47MCP_HTTP_ENABLE_PRUNE_ROUTE=false

49# ChatGPT / Claude OAuth facade. Setting any OAuth value enables it.

dist/index.jsView file

Lines 1-18javascript

1"use strict";

2var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {

3 if (k2 === undefined) k2 = k;

dist/services/features/telegram-mcp/src/shared/integrations/terminal/ptyRegistry.jsView file

Lines 49-89javascript

49exports.renderVisiblePtyHtml = renderVisiblePtyHtml;

50exports.renderVisiblePtyAnsi = renderVisiblePtyAnsi;

51exports.sendPtyAction = sendPtyAction;

52exports.sendPtyText = sendPtyText;

53exports.resizePtyTarget = resizePtyTarget;

54exports.subscribePtyTarget = subscribePtyTarget;

scripts/build-package-artifact.shView file

•path = scripts/build-package-artifact.sh kind = build_helper sizeBytes = 648 magicHex = [redacted]

Medium

Ships Build Helper

Package ships non-JavaScript build or shell helper files.

scripts/build-package-artifact.shView on unpkg

dist/services/features/telegram-mcp/src/shared/integrations/telegram/proxyFetch.jsView file

Lines 1-34javascript

1"use strict";

2Object.defineProperty(exports, "__esModule", { value: true });

3exports.createTelegramBaseFetchConfig = createTelegramBaseFetchConfig;

4exports.createTelegramFetch = createTelegramFetch;

5const https_proxy_agent_1 = require(

docs/CHAT_CONNECTOR.mdView file

Lines 1-37markdown

1# ChatGPT and Claude connector

3TellyMCP can expose its Streamable HTTP MCP endpoint to ChatGPT and Claude

4through an OAuth 2.0 authorization-code facade with PKCE. The facade coexists

5with `MCP_HTTP_BEARER_TOKEN`; existing internal clients can continue to use the

6static bearer token.

8## Configure the gateway

10Add the following to the gateway environment file:

12```bash

Source & flagged code

9 flagged · loading source

package.jsonView file

•scripts.postinstall = node ./scripts/postinstall.js

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg

•scripts.postinstall = node ./scripts/postinstall.js

Medium

Ambiguous Install Lifecycle Script

Install-time lifecycle script is not statically allowlisted and needs review.

package.jsonView on unpkg

.env.example.gatewayView file

58patternName = private_key_rsa severity = critical line = 58 matchedText = # TELLYM...-\n"

Critical

Critical Secret

Package contains a critical-looking secret pattern.

.env.example.gatewayView on unpkg · L58

58patternName = private_key_rsa severity = critical line = 58 matchedText = # TELLYM...-\n"

Critical

Secret Pattern

RSA private key in .env.example.gateway

.env.example.gatewayView on unpkg · L58

dist/index.jsView file

16Object.defineProperty(exports, "__esModule", { value: true }); L17: __exportStar(require("./lib/moleculer"), exports);

Medium

Dynamic Require

Package source references dynamic require/import behavior.

dist/index.jsView on unpkg · L16

dist/services/features/telegram-mcp/src/shared/integrations/terminal/ptyRegistry.jsView file

69const parts = ["[pty exited"]; L70: if (typeof record.exitCode === "number") { L71: parts.push(`code=${record.exitCode}`); ... L89: return { L90: ...process.env, L91: TELLYMCP_TERMINAL_CONTEXT: "1", ... L98: const tempDir = node_fs_1.default.mkdtempSync(node_path_1.default.join(node_os_1.default.tmpdir(), "tellymcp-pty-bash-")); L99: const rcPath = node_path_1.default.join(tempDir, `${sanitizeFileNameSegment(record.sessionId)}.bashrc`); L100: const promptPrefix = buildContextPromptPrefix(record); ... L178: const target = input.target?.trim() || buildPtyTarget(input.sessionId); L179: const cwd = input.cwd?.trim() || process.cwd(); L180: const terminal = createHeadlessTerminal(config);

Medium

Install Persistence

Source writes installer persistence such as shell profile or service configuration.

dist/services/features/telegram-mcp/src/shared/integrations/terminal/ptyRegistry.jsView on unpkg · L69

scripts/build-package-artifact.shView file

•path = scripts/build-package-artifact.sh kind = build_helper sizeBytes = 648 magicHex = [redacted]

Medium

Ships Build Helper

Package ships non-JavaScript build or shell helper files.

scripts/build-package-artifact.shView on unpkg

dist/services/features/telegram-mcp/src/shared/integrations/telegram/proxyFetch.jsView file

14patternName = generic_password severity = medium line = 14 matchedText = url.pass...D]";

Medium

Secret Pattern

Hardcoded password in dist/services/features/telegram-mcp/src/shared/integrations/telegram/proxyFetch.js

dist/services/features/telegram-mcp/src/shared/integrations/telegram/proxyFetch.jsView on unpkg · L14

docs/CHAT_CONNECTOR.mdView file

17patternName = private_key_rsa severity = critical line = 17 matchedText = TELLYMCP...-\n"

Critical

Secret Pattern

RSA private key in docs/CHAT_CONNECTOR.md

docs/CHAT_CONNECTOR.mdView on unpkg · L17

Findings

3 Critical1 High8 Medium5 Low

CriticalCritical Secret.env.example.gateway

CriticalSecret Pattern.env.example.gateway

CriticalSecret Patterndocs/CHAT_CONNECTOR.md

HighInstall Time Lifecycle Scriptspackage.json

MediumAmbiguous Install Lifecycle Scriptpackage.json

MediumDynamic Requiredist/index.js

MediumNetwork

MediumEnvironment Vars

MediumInstall Persistencedist/services/features/telegram-mcp/src/shared/integrations/terminal/ptyRegistry.js

MediumShips Build Helperscripts/build-package-artifact.sh

MediumStructural Risk Force Deep Review

MediumSecret Patterndist/services/features/telegram-mcp/src/shared/integrations/telegram/proxyFetch.js

LowNon Install Lifecycle Scripts

LowScripts Present

LowFilesystem

LowHigh Entropy Strings

LowUrl Strings

Source & flagged code

9 flagged

package.jsonView file

Lines 21-61json

21 "VERSION.md",

22 "CHANGELOG.md",

23 "TOOLS.md",

24 ".env.example.client",

25 ".env.example.gateway"

26 ],

27 "publishConfig": {

28 "access": "public"

29 },

30 "keywords": [

31 "telegram",

32 "mcp",

33 "human-in-the-loop",

34 "bot",

35 "agent"

36 ],

37 "_moduleAliases": {

38 "@src": "src"

39 },

40 "scripts": {

41 "postinstall": "node ./scripts/postinstall.js",

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg · L41

Medium

Ambiguous Install Lifecycle Script

Install-time lifecycle script is not statically allowlisted and needs review.

package.jsonView on unpkg · L41

42 "build:extensions": "node ./packages/firefox-attach-extension/scripts/build.mjs && node ./packages/chrome-attach-extension/scripts/build.mjs",

43 "prepack": "yarn build && yarn build:extensions",

44 "prepublishOnly": "yarn build && yarn build:extensions && yarn lint && yarn test",

45 "mcp:local": "codex mcp add telegramHuman --url http://127.0.0.1:8787/mcp",

50 "dev:sh": "TELLYMCP_SOURCE_RUNTIME=true tsx src/cli.ts run --env ./.env-client",

51 "dev": "yarn dev:gw",

52 "dev:watch": "yarn dev:gw",

53 "dev:service": "yarn dev:gw",

54 "build": "rm -rf dist && tsc -p tsconfig.json && tsc-alias -p tsconfig.json",

55 "start": "yarn start:gw",

56 "start:gw": "node ./node_modules/moleculer/bin/moleculer-runner.js dist/services --config dist/moleculer.config.js --mask \"**/*.service.js\"",

57 "start:gw:telegram": "node ./node_modules/moleculer/bin/moleculer-runner.js dist/services/features/telegram-mcp --config dist/moleculer.config.js --mask \"**/*.service.js\"",

58 "lint": "eslint .",

59 "format": "prettier --write .",

60 "format:check": "prettier --check .",

61 "test": "vitest run",

.env.example.gatewayView file

Lines 38-78text

38# TELEGRAM_WEBHOOK_PATH=/telegram/webhook

39# TELEGRAM_WEBHOOK_PUBLIC_URL=https://your-domain.example/api/telegram/webhook

40# TELEGRAM_WEBHOOK_SECRET=change_me_webhook_secret

41# TELEGRAM_WEBHOOK_TRACE=false

42# TELEGRAM_WEBHOOK_DROP_PENDING_UPDATES=false

44# Optional static bearer auth for internal MCP clients.

45# MCP_HTTP_BEARER_TOKEN=

46MCP_HTTP_ENABLE_DEBUG_ROUTES=false

47MCP_HTTP_ENABLE_PRUNE_ROUTE=false

49# ChatGPT / Claude OAuth facade. Setting any OAuth value enables it.

dist/index.jsView file

Lines 1-18javascript

1"use strict";

2var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {

3 if (k2 === undefined) k2 = k;

dist/services/features/telegram-mcp/src/shared/integrations/terminal/ptyRegistry.jsView file

Lines 49-89javascript

49exports.renderVisiblePtyHtml = renderVisiblePtyHtml;

50exports.renderVisiblePtyAnsi = renderVisiblePtyAnsi;

51exports.sendPtyAction = sendPtyAction;

52exports.sendPtyText = sendPtyText;

53exports.resizePtyTarget = resizePtyTarget;

54exports.subscribePtyTarget = subscribePtyTarget;

scripts/build-package-artifact.shView file

•path = scripts/build-package-artifact.sh kind = build_helper sizeBytes = 648 magicHex = [redacted]

Medium

Ships Build Helper

Package ships non-JavaScript build or shell helper files.

scripts/build-package-artifact.shView on unpkg

dist/services/features/telegram-mcp/src/shared/integrations/telegram/proxyFetch.jsView file

Lines 1-34javascript

1"use strict";

2Object.defineProperty(exports, "__esModule", { value: true });

3exports.createTelegramBaseFetchConfig = createTelegramBaseFetchConfig;

4exports.createTelegramFetch = createTelegramFetch;

5const https_proxy_agent_1 = require(

docs/CHAT_CONNECTOR.mdView file

Lines 1-37markdown

1# ChatGPT and Claude connector

3TellyMCP can expose its Streamable HTTP MCP endpoint to ChatGPT and Claude

4through an OAuth 2.0 authorization-code facade with PKCE. The facade coexists

5with `MCP_HTTP_BEARER_TOKEN`; existing internal clients can continue to use the

6static bearer token.

8## Configure the gateway

10Add the following to the gateway environment file:

12```bash