Investigate Telegram bot API token

Build 4.6.1 · Scan 2026-10-07T12:20:21.839Z

1 distinct recorded findings; 1 have inspectable metadata. Locations are representative, not an inventory of every source match.

A Telegram bot API token. Anyone with it can control the bot, read its messages and post as it — regenerate via BotFather.

Static evidence does not establish runtime impact. Source excerpts and line numbers were not recorded.

Evidence preview

Evidence type

Static string match

Representative location

classes.dex

Recorded match

•••••••• (40+ chars, redacted)

Detector rule

telegram_bot_token

Recorded file locations