bikini/telejam
- Total stars
- 173
- Today
- +11since 00:03 UTC
Save to My finds to follow releases and star growth. Saved in this browser.
About the project
A security research repository documenting three memory-safety bugs in QuickJS as embedded in Telegram Desktop's widget sandbox, including two independent RCE chains that launch Calculator from a bot-delivered widget.
Useful for
- Study the await using use-after-return chain to understand how a forged JSVarRef yields arbitrary read/write.
- Reproduce the generator-prologue UAF PoC against a pinned QuickJS build to validate the fix.
- Check whether your QuickJS or quickjs-ng pin contains the cpool_add negative-index underwrite.
README summarized by DeepSeek V4.1 Flash. Details may be inaccurate. Read the original README →
Star growth looks organic. Data as of November 14, 2026, 10:41 UTC.
The star-growth assessment does not verify whether the project is safe to run.
Stars per day
Bars show stars per UTC day; the line is a moving average of available history. Gaps mean missing data, not zero growth. Today's bar is incomplete. Red marks spike days.
Why it’s trending
- Star-counter measurements on 2026-11-14 (UTC), 00:03–10:33: 162 → 173 stars (+11). This is the change over that interval.
- Estimated end-of-day forecast: about +35 stars, using observed gains and the previous day.
- The repository is 2 days old and already has 173 stars. With less than two weeks of history, there's no usual pace to compare the spike against yet.
- About 18 forks a day — people are taking the code.
- Recent forks include notable developers: @CrackerCat (1,099 followers).
Measured growth: the last 7 completed days
The full 7-day window is unavailable; no weekly total or comparison is calculated.
Daily measurements · UTC
- November 7, 2026
- —
- November 8, 2026
- —
- November 9, 2026
- —
- November 10, 2026
- —
- November 11, 2026
- —
- November 12, 2026
- 110
- November 13, 2026
- 57
Largest measured day in the last 30 days: 110 · November 12, 2026. Days with data: 2.
Completed days come from GitHub star history; today and forecasts are excluded from this comparison. History checked: November 14, 2026, 10:41 UTC. Sources and measurement limits →
Three GitHub discoveries in each edition
What they do, why they are gaining interest, and what to check before using them.
Editions at 10:00, 16:00, 22:00 MSK.
Numbers
- Total stars
- 173
- Today
- +11 stars measured 2026-11-14, 00:03–10:33 UTC, ≈ 35 by evening
- Forks
- 60
- Issues and pull requests
- 0
- Watchers
- 2
- Language
- HTML
- Created
- November 12, 2026
- Last push
- November 12, 2026
Star trust
Growth looks organic: forks and discussion are in line with active projects, and stars arrive unevenly, the way people give them.
These are heuristics, not a verdict: we judge by the repository’s behavior, not by a list of stargazers.
Spotted in
- November 14, 2026Top new repositories this week: #95
- November 13, 2026Top new repositories this week: #118
README badge
Paste it into your README — the badge shows the current magnitude and links to this page.
[](https://gitnova.dev/en/r/bikini/telejam)