Please do your part by reporting Nekogram to Google 🙏

Since the Google Play version also contains this malicious code, it is vital to report it so Play Protect can flag and disable the app on all user devices. (thx @RomashkaTea for confirming)

https://play.google.com/store/apps/details?id=tw.nekomimi.nekogram - App in Play store, you can report it here also

https://support.google.com/googleplay/android-developer/contact/takedown - Takedown page

Follow @TechLeaksZone

The telegram scene for the next week is gonna be like "yeah so our slopgram doesn't steal data like goygram, we are a secure fork of ligmagram and have been vetted 69 times by the devs of cringegram which is our biggest competitor, and one of them is also in the navy"

Bug fixes by other unofficial telegram clients are now on speedrun 🫡

https://github.com/arsLan4k1390/Cherrygram/commit/56d2337179a6ae2f967498a48fe9cc69e9f1de07

Follow @TechLeaksZone

GitHub PoC Proves Nekogram Collects Your Private Number

Mystic Leaks have built a PoC (Proof of Concept) using which you can see that Nekogram does indeed collect your phone number

To validate this, we made a PoC: an LSPosed module that replaces the bot ID and username to ours so all requests are going to it. That way, we confirmed that the phone numbers are being collected EVERY LOGIN.

The PoC is available here: https://github.com/RomashkaTea/nekogram-proof-of-logging

Follow @TechLeaksZone

The Nekogram developer accepts the fact that his app indeed sends users phone number.

He then argues that the bot does not have a data collection function.

In another words, "Trust me bro, we don't collect. The app just sends it to fulfill its own inner wishes."

NASA’s mission to orbit the Moon through Artemis II is being interrupted by Outlook (New) and Outlook (classic) as they both refuse to open 😂

Microslop never fails to entertain us, be it on Earth or in Outer Space.

Follow @TechLeaksZone

Few months ago I found that Telegram Plus uses accounts that connect through their client to give themselves reaction on their Telegram channel.

I checked the logs on the app, you can see that as soon as I click download the file to update the app, a reaction is immediately sent.

18_12_2025_19_52_01.391 D/tmessages: create load operation fileName=4_5920320703357263724.apk documentName=beta_plus-armHockey-12.2.10.1-21908.apk size=67.4 MB position in queue 0 account=0 cacheType=1 priority=65536 stream=null

18_12_2025_19_52_01.393 D/tmessages: send request org.telegram.tgnet.TLRPC$TL_messages_sendReaction@2db04cd with token = 4849

18_12_2025_19_52_01.412 D/tmessages: start loading file to temp = /storage/emulated/0/Android/data/org.telegram.plus/cache/4_5920320703357263724.temp final = /storage/emulated/0/Android/data/org.telegram.plus/cache/4_5920320703357263724.apk priority65536

This is done only in channel versions to have some statistics about downloads and installations, and verify that updates are working as expected. You can install Play Store release to avoid this.
Anyway, we can add an option to disable/enable this behavior so you can decide if you want to collaborate with this statistics or not

Here's how Axios npm was compromised

GitHub Copilot inserted advertisements in pull requests

GitHub Copilot inserted ads promoting Raycast, Slack, Teams and itself in more than 11000 pull requests.

Technically, these were not ads but just "tips" by Copilot, as the raw data included a hidden HTML comment, "START COPILOT CODING AGENT TIPS."

This "bug" was introduced on March 24, when Copilot's abilities were expanded. Martin Woodward blamed it on a "programming logic issue" and tips have now been turned off permanently.

🧑‍💻 @agamtechtricks

Your first look at the iOS 27 ColorOS 17

So the ColorOS 17 screenshots are just fake images, made by designer on Weibo

That's a relief now.

Telegram will let users know whether the user they are interacting with uses an unofficial client and thus their messages sent to them may be less secure.

Learn more about the other features in the latest update here: https://telegram.org/blog/ai-editor-mighty-polls-and-more

Follow @TechLeaksZone