← Back to report

Investigate Telegram bot API token

Build 1.21.0 · Scan 2026-10-03T19:57:14.392Z

1 distinct recorded findings; 1 have inspectable metadata. Locations are representative, not an inventory of every source match.

A Telegram bot API token. Anyone with it can control the bot, read its messages and post as it — regenerate via BotFather.

Static evidence does not establish runtime impact. Source excerpts and line numbers were not recorded.

Evidence preview

Evidence type
Static string match
Representative location
_split_config.arm64_v8a/lib/arm64-v8a/libapp.so
Recorded match
•••••••• (40+ chars, redacted)
Detector rule
telegram_bot_token
Recorded file locations
  • _split_config.arm64_v8a/lib/arm64-v8a/libapp.so