AIThe New Stackabout 1 hour ago
Postman Installs Plugins Without Permission
4 min read
A developer named indicava reported on October 25 that Postman's desktop version 12.33.4 installed plugins into Claude Code and OpenAI Codex without consent. The app also auto-approved a startup hook on October 24, modifying configuration files and adding a remote MCP connection to https://mcp.postman.com/mcp. Postman had not responded to inquiries regarding this automatic behavior by the time of publication.
Level
Hype check
Tap to vote and see what everyone thinks.