
Security News
Attackers Are Hunting High-Impact Node.js Maintainers in a Coordinated Social Engineering Campaign
Multiple high-impact npm maintainers confirm they have been targeted in the same social engineering campaign that compromised Axios.
auto-answering
Advanced tools
A configurable Node.js Telegram bot for Premium users that automatically replies to messages based on customizable triggers and replies, simulates typing behavior, supports multi-language responses, and logs messages for auditing.
A robust Telegram bot that dynamically responds to messages using predefined triggers and replies. It logs messages and errors for auditing and debugging purposes and simulates real-user typing behavior before replying.
messages.log.errors.log.config.json..env and config.json.npm install
.env file in the root directory with the following variables:BOT_TOKEN=<your_telegram_bot_token>
OWNER_ID=<your_telegram_user_id>
WEBHOOK_URL=https://your.domain.com
PORT=3000
SAVE_LOCAL=true
config.json to set your triggers and replies.Example config.json with localization support:
{
"typingDelay": 1500,
"languages": ["en", "ru"],
"defaultLang": "en",
"responses": {
"en": [
{
"triggers": ["hi", "hello", "hey"],
"replies": ["Hello! 👋", "Hi there! How can I help you?"]
}
],
"ru": [
{
"triggers": ["привет", "здравствуй"],
"replies": ["Привет! 👋", "Здравствуйте! Чем могу помочь?"]
}
]
}
}
Start the bot with:
npm start
The bot will automatically set the Telegram webhook on startup.
messages.log (if enabled in .env)errors.logEnsure your server is accessible via the public URL defined in WEBHOOK_URL.
Use services like Render, Railway, or Cloudflare Pages with Workers for hosting.
FAQs
A configurable Node.js Telegram bot for Premium users that automatically replies to messages based on customizable triggers and replies, simulates typing behavior, supports multi-language responses, and logs messages for auditing.
We found that auto-answering demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
Multiple high-impact npm maintainers confirm they have been targeted in the same social engineering campaign that compromised Axios.

Security News
Axios compromise traced to social engineering, showing how attacks on maintainers can bypass controls and expose the broader software supply chain.

Security News
Node.js has paused its bug bounty program after funding ended, removing payouts for vulnerability reports but keeping its security process unchanged.