
Research
/Security News
PolinRider Spreads Through Compromised GitHub Accounts and Packagist
Operators behind PolinRider used a compromised GitHub account to plant malware in four development versions of a Packagist package with 700,000+ downloads.
n8n-nodes-volara
Advanced tools
n8n community node for Volara — send WhatsApp/omnichannel messages, manage contacts, create broadcasts, and trigger workflows on Volara events.
An n8n community node for Volara — the omnichannel WhatsApp/messaging and CRM platform. Use it to send messages, manage contacts, launch broadcasts, read conversations, and start workflows when Volara events arrive.
n8n is a workflow automation tool. Volara is a messaging and customer platform. Together you can wire up things like "when a new WhatsApp message comes in, look up the contact, and post it to Slack" without writing code.
n8n-nodes-volara, and confirm.After installation the Volara and Volara Trigger nodes appear in the node panel.
Community nodes are available on self-hosted n8n. On n8n Cloud, verified community nodes can be installed from the same panel.
git clone https://github.com/volara-asia/volara-n8n.git
cd volara-n8n
npm install
npm run build
# link into your n8n custom nodes folder
The node uses one credential, Volara API:
https://api.volara.chat unless you run a self-hosted or
region-specific Volara deployment.GET /api/v1/metrics/dashboard to confirm the key works.The key is sent as Authorization: Bearer <key> on every request and is never logged.
POST /api/v1/conversations/{id}/messages).
Provide a plain Text body, or a structured Content JSON payload for templates/media,
plus an optional Type hint.POST /api/v1/customers). Fields: name, email,
phone number (E.164, e.g. +6281234567890), source.GET /api/v1/customers/{id}).GET /api/v1/customers) with search, sort, order, and
optional auto-paging via Return All.POST /api/v1/broadcasts). Fields: title, message
content, target audience JSON.GET /api/v1/broadcasts).GET /api/v1/conversations/{id}).GET /api/v1/conversations) filtered by status and
free-text search, with optional auto-paging.The trigger starts a workflow when Volara delivers a webhook event such as a new message, a new or updated conversation, or a ticket.
Volara delivers a JSON body of the form:
{
"id": "evt_...",
"type": "message.received",
"createdAt": "2026-06-23T10:00:00Z",
"data": { },
"organizationId": "org_..."
}
Volara signs the raw request body with HMAC-SHA256 and sends it in the x-volara-signature
header (hex, optionally prefixed sha256=). Verifying that header protects the endpoint from
forged events.
Automatic subscription registration and HMAC verification are not yet active — they firm up once the Volara webhook signing API is finalized. The node already exposes a Signing Secret option so workflows are ready to switch verification on without reconfiguration. Until then, treat the webhook URL as a shared secret.
n8nNodesApiVersion: 1.MIT — see LICENSE.
FAQs
n8n community node for Volara — send WhatsApp/omnichannel messages, manage contacts, create broadcasts, and trigger workflows on Volara events.
We found that n8n-nodes-volara demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.

Research
/Security News
Operators behind PolinRider used a compromised GitHub account to plant malware in four development versions of a Packagist package with 700,000+ downloads.

Security News
GitHub Actions now supports cache-mode, a least-privilege control on the Actions cache aimed at the cache poisoning technique behind recent compromises.

Company News
Allow myself to introduce... myself.