
Research
/Security News
OpenAPI React Query Codegen Compromised in Mini Shai-Hulud npm Supply Chain Attack
Ten malicious OpenAPI React Query Codegen versions were published to npm in the Mini Shai-Hulud attack, all with valid provenance.
thunderbird-cli
Advanced tools
Low-level CLI to manage Mozilla Thunderbird email from the shell. 38 commands for search, read, compose, reply, attachments, folders, bulk ops. Designed for AI agents.
Low-level CLI to manage Mozilla Thunderbird email from the shell. 38 commands designed for AI agents.
Part of the thunderbird-cli project.
tb is a thin HTTP client that talks to a local Thunderbird WebExtension via a bridge daemon. It exposes 38 commands across all messenger.* APIs:
--fields, --compact, --max-body for AI useAll output is JSON wrapped in {ok, data} / {ok, error, code}.
This package alone is not enough. You need:
thunderbird-cli-bridge daemon running on 127.0.0.1:7700See the main repo setup guide for the full installation.
npm install -g thunderbird-cli
Or use without installing:
npx thunderbird-cli health
tb stats # account/folder counts
tb search "invoice" --since 7d # find recent invoices
tb read 123 --headers # cheap headers-only read
tb compose --to "a@b.com" --body "Hi" # save as draft
tb compose --to "a@b.com" --body "Hi" --send # send immediately
tb attachment-download 123 1.2 --output invoice.pdf
Full reference: docs/COMMANDS.md
| Env var | Default |
|---|---|
TB_BRIDGE_HOST | 127.0.0.1 |
TB_BRIDGE_PORT | 7700 |
TB_AUTH_TOKEN | (none) |
Config file: ~/.config/thunderbird-cli/config.json
MIT
FAQs
Low-level CLI to manage Mozilla Thunderbird email from the shell. 38 commands for search, read, compose, reply, attachments, folders, bulk ops. Designed for AI agents.
The npm package thunderbird-cli receives a total of 58 weekly downloads. As such, thunderbird-cli popularity was classified as not popular.
We found that thunderbird-cli demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.

Research
/Security News
Ten malicious OpenAPI React Query Codegen versions were published to npm in the Mini Shai-Hulud attack, all with valid provenance.

Security News
Socket joins more than 100 technology, cybersecurity, and financial organizations calling for a global surge in cyber defense.

Product
Enterprise security teams can now detect malware, credential theft, suspicious network activity, and risky updates across Microsoft Edge extensions.