Thunderbird: Spam on account creation - Edit: E-mails displaying with incorrect timestamp

I have Thunderbird - installed from the Manjaro Extra Repository.

I just added 2 e-mail accounts to Thunderbird.

For both accounts, a spam/scam e-mail was added to the inbox at the exact time the account was added to Thunderbird. One of these accounts was an e-mail address that was never shared and does not receive spam.

Is there malicious code in the Thunderbird package in Manjaro repository that is doing this? Is this some Easter egg that generates a test e-mail that looks like spam? Is my e-mail address being shared with actual scammers?

The e-mail does not appear in the account inbox outside of Thunderbird, so it appears to be something that is happening within the application.
I can’t find any reference to this behavior anywhere online, so I don’t believe this is intended behavior for Thunderbird.

That package comes directly from arch without modifications.
Can you maybe post this message. Ideally open the source and post as source code with all headers.

3 Likes

There is nothing with Manjaro Linux which generates any personalised emails.

But do note: Manjaro Linux has no control over how any individual application behaves. If you have any concerns regarding an application - you should address the developers of said application.

 $ pamac info thunderbird
Name                  : thunderbird
Version               : 150.0.2-1
Description           : Standalone mail and news reader from
                        mozilla.org
URL                   : https://www.thunderbird.net/
Licenses              : MPL-2.0 GPL-2.0-only LGPL-2.1-only
Repository            : extra
Installed Size        : 298,3 MB
Groups                : --
Depends On            : glibc gtk3 libgdk-3.so=0-64 libgtk-3.so=0-64
                        mime-types dbus libdbus-1.so=3-64 dbus-glib
                        alsa-lib nss hunspell sqlite ttf-font libvpx
                        libvpx.so=12-64 zlib bzip2 libbz2.so=1.0-64
                        botan libwebp libwebp.so=7-64
                        libwebpdemux.so=2-64 libevent libjpeg-turbo
                        libffi libffi.so=8-64 nspr libgcc libstdc++
                        libx11 libxrender libxfixes libxext
                        libxcomposite libxdamage pango
                        libpango-1.0.so=0-64 cairo gdk-pixbuf2
                        freetype2 libfreetype.so=6-64 fontconfig
                        libfontconfig.so=1-64 glib2
                        libglib-2.0.so=0-64 pixman
                        libpixman-1.so=0-64 gnupg json-c libcanberra
                        ffmpeg
Optional Dependencies : hunspell-en_us: Spell checking, American English [Installed]
                        libotr: OTR support for active one-to-one chats
                        libnotify: Notification integration [Installed]
Provides              : --
Replaces              : --
Conflicts With        : --
Packager              : Leonidas Spyropoulos <artafinde@archlinux.org>
Build Date            : ons 13 maj 2026 07:09:36 CEST
Validated By          : MD5 Sum  SHA-256 Sum  Signature

When you create an new account in Thunderbird - the application may be designed to automatically generate a welcome email. Such email will often try to draw attention to new features or important changes.

This is often an unwanted feature but it may not be anything you about it.

The only thing I can think of, is looking through the settings. if there is a search function search for welcome.

Also note that thunderbird has startpage which will load a customized url every time you open the app. The url makes it possible for the thunderbird developers to get some basic application metrics

https://live.thunderbird.net/%APP%/start?locale=%LOCALE%&version=%VERSION%&channel=%CHANNEL%&os=%OS%&buildid=%APPBUILDID%

The best place to address any concerns you may have would be the application developers at https://www.thunderbird.net/ and https://support.mozilla.org/questions/new/thunderbird

EDIT

I have not used thunderbird for years - the application layout has changed a lot, that I do see.

For the sake of verification - I have just checked the installation and first account setup.

I cannot verify your issue - thunderbird generates no welcome email nor does the account receive any spam/scam messages when connecting to an existing email account.

2 Likes

After looking through the message source, I found my answer:

These are real e-mails that were received several years ago and are incorrectly displayed in the inbox in Thunderbird with the time-stamp of the exact time the account was added to Thunderbird.

One is a legitimate e-mail from a company that has since changed their domain. Another is an old spam e-mail that was never filtered and was buried in the inbox under years worth of other stuff.
The e-mails do exist on the server, but with the correct timestamp.

A bug exists, but it is different in nature to what I expected. I’ll consider reporting it to the developers if it is not already known.

2 Likes

This topic was automatically closed 3 days after the last reply. New replies are no longer allowed.