
Security News
Happy Birthday, Shai-Hulud
It has been one year since Shai-Hulud made its first appearance on npm.
dsh-connect-telegram
Advanced tools
Telegram channel adapter for dsh-connect: getUpdates long-polling intake, message normalization, streaming replies, and interactive choice prompts
English | 中文
Telegram channel adapter for dsh-connect: brings DeepSeek Harness agents into Telegram with the same capabilities as the Feishu adapter — bidirectional conversation, streaming typewriter-style replies, interactive choice prompts, image/file intake, and completion cards.
getUpdates long polling (no webhook / no public IP needed).ask_user_question / menu prompts render as inline-keyboard buttons; tapping answers the question.fetch (Node ≥ 18 / ≥ 20).dsh plugin --profile web add dsh-connect dsh-connect-telegram
Create a bot with @BotFather and copy the token. Append to the profile's cordis.patch.yml. The plugin registers itself via its bundle manifest, so only override its config — do not insert it again (duplicate ids crash dsh at boot):
- id: connect-telegram
name: dsh-connect-telegram
config:
botToken: "123456:ABC-YourBotToken"
requireMention: true # groups must @-mention the bot (default true)
language: zh # zh | en
The token may also come from the TELEGRAM_BOT_TOKEN environment variable.
Telegram user ──getUpdates(long poll)──► dsh-connect-telegram ──InboundMessage──► dsh-connect (agent)
Telegram user ◄──sendMessage / editMessageText ◄────── dsh-connect (replies)
All user-facing strings are localized (zh/en) through the core's i18n layer; per-chat language, notification levels, /menu, /progress watchdog and every other core feature work the same as Feishu.
| Key | Default | Description |
|---|---|---|
botToken | env TELEGRAM_BOT_TOKEN | BotFather token |
requireMention | true | Groups: require @-mention or a reply to the bot |
language | zh | User-facing message language |
pollingTimeoutSeconds | 50 | getUpdates long-poll timeout |
baseUrl | — | Bot API base URL override (local Bot API server) |
FAQs
Telegram channel adapter for dsh-connect: getUpdates long-polling intake, message normalization, streaming replies, and interactive choice prompts
We found that dsh-connect-telegram demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.

Security News
It has been one year since Shai-Hulud made its first appearance on npm.

Research
/Security News
Operators behind PolinRider used a compromised GitHub account to plant malware in four development versions of a Packagist package with 700,000+ downloads.

Security News
GitHub Actions now supports cache-mode, a least-privilege control on the Actions cache aimed at the cache poisoning technique behind recent compromises.