https://10alert.com/posts/rogue-npm-packages-mimic-telegram-bot/
Malicious npm Packages Exploit Telegram Bot API to Install SSH Backdoors on Linux - Stay safe