
Security News
Another Round of TEA Protocol Spam Floods npm, But It’s Not a Worm
Recent coverage mislabels the latest TEA protocol spam as a worm. Here’s what’s actually happening.
ftp2telegram
Advanced tools
ftp2telegram is an FTP server that forwards all uploaded files to preconfigured Telegram
contacts.
It was developed with the specific goal of retrofitting a Telegram interface into older devices or software that
exclusively support FTP upload for file transfer.
Caution: ftp2telegram has not undergone security testing. Avoid exposing it to untrusted networks or the public
internet without implementing proper security measures.
pyftpdlib underneath)Requires Python version 3.9 or higher and pip.
pip install ftp2telegram
To configure ftp2telegram, a configuration file is required. By default, the program looks for it
in ~/.ftp2telegram.conf or /etc/ftp2telegram. Create a sample configuration file with:
ftp2telegram --create-example-config
---
ftp:
host: 127.0.0.1
port: 21
telegram:
token: MY_TOKEN
users:
- name: alice
hashed_password: |
$6$Zfgtsr/z3RLvOEKj$D2s4w51WiFiCgyrRD.gxEeMtXxMkgas1OGkSU2c.XMKDdaJ2iOt72yFXM1rvzb7YuoOJ3.i9lMn1qQ7oVEDEm1
telegram_id: 123
ftp):
host: Specifies the FTP server's IP address or hostname.port: Specifies the FTP server's port.telegram):
token: Replace MY_TOKEN with the actual token of your Telegram bot. Create one
using BotFather.users):
name: The username for FTP server authentication.hashed_password: The SHA512-hashed password of the FTP user. Generate a hashed password
using openssl passwd -6.telegram_id: The Telegram user ID associated with the FTP user. Obtain it using bots such
as @userinfobot.Run the server:
ftp2telegram
Log into the server using any of the configured user credentials, and then upload a file. The uploaded file will be automatically sent to the Telegram user linked to the corresponding FTP user in the config file.
ftp2telegram is distributed under the terms of the MIT License.
FAQs
An FTP server that forwards uploaded files to Telegram users
We found that ftp2telegram demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
Recent coverage mislabels the latest TEA protocol spam as a worm. Here’s what’s actually happening.

Security News
PyPI adds Trusted Publishing support for GitLab Self-Managed as adoption reaches 25% of uploads

Research
/Security News
A malicious Chrome extension posing as an Ethereum wallet steals seed phrases by encoding them into Sui transactions, enabling full wallet takeover.