Postman silently auto-installs AI plugins and attempts to share all API data

GitHubNov 3, 9:22 AM PT

Context: A GitHub issue reports that opening Postman's desktop app added Postman plugins to Codex and Claude Code, a startup instruction hook and a remote MCP connection without the user's consent.

Source

GitHub (github.com)

Published

Nov 3, 9:22 AM PT

First seen here

Nov 3, 7:28 PM PT

Edition

Tuesday, November 3, 2026, ranked 4

Status

A claim made in a post or discussion that nobody independent has verified.

Engagement

As shown by each platform when we last looked (Nov 3, 7:28 PM PT).

Why it’s here

Most-discussed developer-tools story on Hacker News today (1,076 points).

Topics

Developer tools, Security, AI agents