Postman's installer reportedly added AI agent plugins and hooks without clear user consent
AIA user reports that opening Postman desktop 12.33.4 automatically installed Codex and Claude Code plugins, enabled a remote Postman MCP connection, and added a session-start hook that routes API tasks to Postman skills. The report cites Postman's own log entries and the plugin's installer source, which attempts to approve its own hook.
Source details
Hacker News · AI (150+ points) · sidgarimella · github.comPublished · added here
Original title: Postman silently auto-installs AI plugins and attempts to share all API data