
Security News
Re-Enabled GitHub Actions Expose Thousands of Repositories to Mini Shai-Hulud
Two compromised GitHub Actions were re-enabled with malicious tags intact, exposing thousands of downstream repositories to Mini Shai-Hulud.
@vox-ai-app/integrations
Advanced tools
macOS system integrations for Vox: Apple Mail, Screen control, and iMessage. Each integration ships with tool implementations and LLM tool definitions.
Requires macOS. Each integration needs specific system permissions granted by the user.
npm install @vox-ai-app/integrations
Peer dependency: electron >= 28
| Export | Contents |
|---|---|
@vox-ai-app/integrations | All exports |
@vox-ai-app/integrations/defs | All tool definitions |
@vox-ai-app/integrations/mail | Mail functions |
@vox-ai-app/integrations/screen | Screen capture + control |
@vox-ai-app/integrations/screen/capture | Capture only |
@vox-ai-app/integrations/screen/control | Control only |
@vox-ai-app/integrations/screen/queue | Session acquire/release |
@vox-ai-app/integrations/imessage | iMessage data, reply, service |
Requires Automation permission for Mail (System Settings → Privacy & Security → Automation).
import { sendEmail, readEmails, searchContacts, replyToEmail } from '@vox-ai-app/integrations/mail'
const emails = await readEmails({ account: 'Work', folder: 'INBOX', limit: 20 })
await sendEmail({ to: 'user@example.com', subject: 'Hi', body: 'Hello.' })
await replyToEmail({ messageId: '...', body: 'Thanks!' })
Tool definitions:
import { MAIL_TOOL_DEFINITIONS } from '@vox-ai-app/integrations/defs'
Requires Accessibility permission (System Settings → Privacy & Security → Accessibility).
import {
captureFullScreen,
clickAt,
typeText,
getUiElements
} from '@vox-ai-app/integrations/screen'
import { acquireScreen, releaseScreen } from '@vox-ai-app/integrations/screen/queue'
const session = await acquireScreen()
try {
const img = await captureFullScreen()
await clickAt({ x: 100, y: 200 })
await typeText({ text: 'Hello' })
} finally {
await releaseScreen(session)
}
Tool definitions:
import { SCREEN_TOOL_DEFINITIONS } from '@vox-ai-app/integrations/defs'
Requires Full Disk Access (System Settings → Privacy & Security → Full Disk Access).
import { listConversations, listContacts, sendReply } from '@vox-ai-app/integrations/imessage'
const conversations = listConversations()
const contacts = listContacts()
await sendReply('+15551234567', 'Hello from Vox!')
import { createIMessageService } from '@vox-ai-app/integrations/imessage'
const svc = createIMessageService({
logger,
onTranscript: (text, handle) => {
/* emit to UI */
},
onOpenSettings: () => shell.openExternal('x-apple.systempreferences:...'),
onMessage: async (text, handle) => {
// call your AI here, return the reply string
return await askAI(text)
}
})
svc.start('my-passphrase')
// user sends "my-passphrase\nWhat's the weather?" → AI replies back
onMessage must return a Promise<string | null>. Returning null skips the reply.
Tool definitions:
import { IMESSAGE_TOOL_DEFINITIONS } from '@vox-ai-app/integrations/defs'
MIT
FAQs
macOS integrations (Mail, Screen, iMessage, Contacts, Shortcuts, Music, Calendar, Reminders) for Vox
The npm package @vox-ai-app/integrations receives a total of 5 weekly downloads. As such, @vox-ai-app/integrations popularity was classified as not popular.
We found that @vox-ai-app/integrations demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.

Security News
Two compromised GitHub Actions were re-enabled with malicious tags intact, exposing thousands of downstream repositories to Mini Shai-Hulud.

Research
/Security News
A malicious Firefox extension fetches its payload after installation to evade detection, steal Google session cookies, and automate account takeover.

Research
/Security News
The compromise affects MemTensor's MemOS, an open source memory framework for large language models (LLMs) and AI agents. Both npm package @memtensor/memos-cloud-openclaw-plugin and the PyPI package MemoryOS are compromised. They drop cross-platform Go binaries that exfiltrate developer secrets.