Critical impact
Postman silently auto-installs AI plugins and attempts to share all API data
What happened
A user reported that opening Postman on their Mac automatically installed plugins for Codex and Claude Code without their explicit permission. The software also created a startup instruction hook and attempted to approve its own trust settings, which the user identified as a severe consent and trust-boundary issue.
Why it matters
This behavior is significant because an API client should not alter unrelated coding agents or make itself the default workflow in other tools simply because the user opened the application.
Is this a big deal?
Get stories like this every morning
The day's AI news in plain English, in your inbox at 8:30 IST. Free.
More AI news
AI unlocks Gödel's notebooks, said to contain hundreds of proved theoremsIndustry news · 13 Nov 2026Gemini 4 Hydrogen and OrchestratorIndustry news · 12 Nov 2026Gemini 4 HydrogenIndustry news · 12 Nov 2026I'm making LLMs work on small and old devicesIndustry news · 12 Nov 2026United Airlines bans AI agents from booking flights on behalf of travelersIndustry news · 11 Nov 2026This page was collected from github.com and summarised automatically by AIPulsee's pipeline. See how it runs.