Hacker News · AI· sidgarimella·· 8 hours agoSelectedAI score86
Postman accused of silently installing AI plugin and modifying Codex and Claude Code agent configurations
Postman silently auto-installs AI plugins and attempts to share all API data
AI guide
Developers found that after an update, the Postman desktop client for macOS silently installs an AI plugin and CLI tools, while tampering with configurations for Codex and Claude Code.
Why it matters
The investigation provided evidence of the client silently modifying external coding agent configurations and self-authorizing hooks, underscoring permission boundaries and security risks in the agent ecosystem.
Source:Hacker News · AI · github.com