mleak-files is the attachment companion to mleak. Mail bodies often say very little, but the files attached to them frequently carry a lot of context: the real author name, the organisation, the editing tool, timestamps, template paths, macro hints, and — for images — EXIF, XMP and sometimes GPS coordinates. This add-on parses all of that inside Thunderbird and shows you the result in a clear panel.
Supported formats:
- PDF — Info dictionary and simple XMP fields
- OOXML —
docx,xlsx,pptx(core, app, custom properties) - OpenDocument —
odt,ods,odp,odg - Images — JPEG/TIFF EXIF, PNG
tEXtandeXIf - Derived hints — timestamp mismatches, author handoffs, macro-enabled containers, toolchain inconsistencies
The add-on has no network permissions and no host permissions. Attachments are read locally through Thunderbird’s WebExtension APIs and parsed in the extension context. Parsing is bounded by size limits (default 10 MB per attachment, configurable) and the ZIP reader enforces entry, path and compression-ratio caps. Legacy binary Office formats (.doc, .xls, .ppt) are intentionally not parsed.
Links
- GitHub: https://github.com/c0decave/mleak-files
- Latest release: https://github.com/c0decave/mleak-files/releases/tag/0.4.14
- Thunderbird Add-ons (ATN): listing in review — expected on https://addons.thunderbird.net/ shortly
- Sister projects: mleak (inbound headers) ·
mleak-counter(outbound stripping)
Build
- Version: 0.4.14 (2026-05-11)
- File:
mleak-files-0.4.14.xpi - SHA-256:
82929af81479fb013f82ce361358bda14e3242d2a408268d6c880add1b5cab04 - License: MPL-2.0 · Thunderbird 115+ · 18 UI locales (incl. RTL)
- Contact:
mlux@undisclose.de