Research
Security News
Malicious npm Packages Inject SSH Backdoors via Typosquatted Libraries
Socket’s threat research team has detected six malicious npm packages typosquatting popular libraries to insert SSH backdoors.
@ptkdev/node-telegram-bot-boilerplate
Advanced tools
Create your telegram bot with this friendly boilerplate. Use this repository as template for your bot
Create your telegram bot with this friendly boilerplate. Use this repository as a template for your bot
This is a github template, you can fork it or use it as a template to start a new project with this repository as hello-world. I hate to start a new project with an empty template, often I miss correct configuration, readme instruction or I need samples of code. Use this repository as a template to solve this problem.
This project is free, open source and I try to provide excellent free support. Why donate? I work on this project for several hours in my spare time and try to keep it up to date and working. THANK YOU!
npm run init:token --username name_bot --token 1234:asdfghjkl
npm run init
npm run dev
/start
on telegram bot.If you want to replace all strings (example: package name, author, URLs, etc...) in the markdown file, source files and others files of this project you need to edit setup.json
with correct values and run npm run setup
.
If you want to run the bot using webhooks you need to place your SSL certificate and Private key in the certs
directory and configure the webhook object in the config file like:
webhook: {
url: "https://my.host.com:8443", // or DNS name
port: 8443,
selfSigned: true
},
If you want to run the bot with your self-signed certificate selfSigned
flag needs to be set to true
, this will allow us to communicate to Telegram that our webhook server can be trusted. More information about webhooks with self-signed certificates can be found here
you can generate your self-signed certificate using the utility script:
npm run init:certs [common-name]
Replace common-name
with the same host-name or IP address you are using in the webhook.url
path of the config.js
file
Deploy bot to your server and:
npm run init:token --token asdfghjkl
npm run init
npm run release
npm run start-pm2
You can also release and run your bot as a Docker container.
docker run ptkdev/node-telegram-bot-boilerplate:<version>
where <version>
can be one of the releases (ex. v1.0.0) or latest
For your convenience, in case you would like to run the bot in webhook
mode, we have already exposed 8443
port on our docker files.
To change the configuration to match yours, just change the Dockerfile line with the EXPOSE
instruction
EXPOSE 8443
in the end, you'll be able to expose the docker port using -p <port>:<host-port>
docker parameter.
The preferred way to provide the configuration file is to mount the final configuration under /app/dist/configs/config.js
:
docker run -v ${PWD}/app/configs/config.js:/app/dist/configs/config.js ptkdev/node-telegram-bot-boilerplate:<version>
Note: the docker images have been prepared for many architectures but have been tested mainly on amd64 architecture.
Run npm run docs
Thanks to all our backers! 🙏 Donate 3$ or more on paypal, ko-fi, github or patreon and send me email with your avatar and url.
I ❤️ contributions! I will happily accept your pull request! Translations, grammatical corrections (GrammarNazi you are welcome! Yes my English is bad, sorry), etc... Do not be afraid, if the code is not perfect we will work together 👯 and remember to insert your name in .all-contributorsrc
and package.json
files.
Thanks goes to these wonderful people (emoji key):
Patryk Rzucidło 💻 🌍 📖 🐛 | Francesco Maida 💻 📖 | Veronica Di Giorgio 🚇 📖 |
💰 In the future, if the donations allow it, I would like to share some of the success with those who helped me the most. To me, Open Source means sharing code, development knowledge and also donations!
FAQs
Create your telegram bot with this friendly boilerplate. Use this repository as template for your bot
We found that @ptkdev/node-telegram-bot-boilerplate demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Security News
Socket’s threat research team has detected six malicious npm packages typosquatting popular libraries to insert SSH backdoors.
Security News
MITRE's 2024 CWE Top 25 highlights critical software vulnerabilities like XSS, SQL Injection, and CSRF, reflecting shifts due to a refined ranking methodology.
Security News
In this segment of the Risky Business podcast, Feross Aboukhadijeh and Patrick Gray discuss the challenges of tracking malware discovered in open source softare.