Openclaw Bluebubbles 2026.5.7.Tgz
PassAudited by VirusTotal on May 10, 2026.
Findings (1)
Package: @openclaw/bluebubbles (npm) Version: 2026.5.7 Description: OpenClaw BlueBubbles channel plugin The package is the OpenClaw channel plugin for the BlueBubbles macOS application, facilitating iMessage integration via the BlueBubbles REST API. Functionality includes configuring the BlueBubbles server URL and password, handling webhook ingress for inbound messages and reactions, and exposing actions for message manipulation (send, reply, react, edit, unsend) and group management (rename, add/remove participants). It implements robust security features including platform-enforced Server-Side Request Forgery (SSRF) protection for all outbound API calls, configurable allowance for private network communication (`dangerouslyAllowPrivateNetwork`), and strict validation to prevent path traversal during local media file processing. It includes specialized logic for message deduplication, history fetching (catchup), and optional macOS Contacts integration for participant name enrichment, all relying on core OpenClaw SDK primitives for security and lifecycle management.
