
Security News
Re-Enabled GitHub Actions Expose Thousands of Repositories to Mini Shai-Hulud
Two compromised GitHub Actions were re-enabled with malicious tags intact, exposing thousands of downstream repositories to Mini Shai-Hulud.
@atomicmail/n8n-nodes-atomicmail
Advanced tools
Atomic Mail inbox for n8n — register, JMAP mail, and inbox polling triggers.
Verified community node package for Atomic Mail — a programmable @atomicmail.ai inbox powered by JMAP.
npm run build:n8n
cd integrations/n8n/atomicmail
npm install
npm run build
Link into a local n8n instance:
npm run dev
Or install the built package into n8n's custom nodes directory.
Create an Atomic Mail API credential (optional):
| Field | Required | Notes |
|---|---|---|
| API Key | No | Paste an existing key, or leave empty and use Register |
| Auth URL | No | Default https://auth.atomicmail.ai |
| API URL | No | Default https://api.atomicmail.ai |
Credential test checks that the Auth URL is reachable — it does not validate your API key (PoW login is required). Use Register or List Inbox to verify connectivity.
| Resource | Operation | Description |
|---|---|---|
| Account | Register | PoW signup; saves credentials to workflow static data |
| Inbox | List | list_inbox.json preset |
| Send | Outbound mail (optional binary attachment) | |
| Reply | Reply by mail ID | |
| JMAP | Request | Inline ops or bundled preset |
| Help | Get Topic | Built-in runtime docs |
Account namespace (default by default) isolates multiple inboxes in one workflow.
Polling trigger for new inbox messages. Default poll interval is 5 minutes (configure on the node). Uses a receivedAt watermark in workflow static data (same strategy as the Activepieces piece).
Both paths are supported (Activepieces parity):
Optional per-step API Key override accepts expressions such as {{ $json.apiKey }} from a prior Register node.
cd integrations/n8n/atomicmail
npm install
npm run build
npm run lint
npx @n8n/scan-community-package @atomicmail/n8n-nodes-atomicmail
Zero runtime npm dependencies. The node imports vendored agentic core from vendor/agentic-core/index.js (single esbuild bundle produced by npm run build:n8n).
vendor/ artifacts with real credentials (vendor is gitignored; rebuild before publish).FAQs
Atomic Mail inbox for n8n — register, JMAP mail, and inbox polling triggers.
The npm package @atomicmail/n8n-nodes-atomicmail receives a total of 7 weekly downloads. As such, @atomicmail/n8n-nodes-atomicmail popularity was classified as not popular.
We found that @atomicmail/n8n-nodes-atomicmail demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 3 open source maintainers collaborating on the project.

Security News
Two compromised GitHub Actions were re-enabled with malicious tags intact, exposing thousands of downstream repositories to Mini Shai-Hulud.

Research
/Security News
A malicious Firefox extension fetches its payload after installation to evade detection, steal Google session cookies, and automate account takeover.

Research
/Security News
The compromise affects MemTensor's MemOS, an open source memory framework for large language models (LLMs) and AI agents. Both npm package @memtensor/memos-cloud-openclaw-plugin and the PyPI package MemoryOS are compromised. They drop cross-platform Go binaries that exfiltrate developer secrets.