this post was submitted on 03 Apr 2026
65 points (100.0% liked)

Opensource

5883 readers
269 users here now

A community for discussion about open source software! Ask questions, share knowledge, share news, or post interesting stuff related to it!

CreditsIcon base by Lorc under CC BY 3.0 with modifications to add a gradient

⠀

founded 2 years ago
MODERATORS
pylapp@programming.dev
65
Spyware distributed using modified code in Nekogram release. Dev closes issue without response. (github.com)
submitted 2 days ago by artyom@piefed.social to c/opensource@programming.dev
9 comments fedilink hide all child comments
 

This is why we install from FDroid.

you are viewing a single comment's thread
view the rest of the comments
[–] Pika@sh.itjust.works 4 points 19 hours ago

PSA on anyone who used this. Terminate your session via active sessions on another telegram app after you "log out"

This app ALSO doesn't properly invalidate your session token like most apps do, so even though it "logs out" on the UI, the auth token to the telegram stays active.

While there hasen't been any evidence that it transmits auth tokens, since it was confirmed AND admitted that they logged phone numbers, it's better to be safe than sorry.