Skip to content
Hacker News front pagesidgarimella

User says Postman auto-installed AI plugins and changed Codex and Claude Code configs

Postman silently auto-installs AI plugins and attempts to share all API data

A user reports that opening Postman 12.33.4 auto-installed Codex and Claude Code plugins, added startup instructions and a remote MCP connection. Logs record the auto-install, the plugin source tries to approve hooks on its own, and the startup instructions tell general API engineering tasks to load Postman skills. The user also found a separately installed Postman CLI.

Why it matters: A Postman user traced cross-app config changes through install logs and plugin source, pinning agent integration's consent boundary to auto-install and hook trust.

Read the original ↗Export Markdown