Illustration, AI-generated from the story text. Tap a panel to read the story through it.

1 / 4Postman's desktop app installed plugins into Claude Code and Codex without asking, a user reports×

The report

A GitHub issue opened October 25th, which drew wide attention on Hacker News on Tuesday, says Postman 12.33.4 for macOS added plugins to Claude Code and Codex on launch, wrote a remote MCP connection and a CLI, and set a startup hook telling the agent to load Postman's API skill, approving that hook itself.

No data claim

The reporter does not claim any data left the machine.

No answer

No Postman staff had answered in the thread as of Tuesday.

The new door

Coding agents load whatever sits in their config, which makes those files a new place for a vendor to reach, with or without consent.

Sources and the full story

‹›

Postman's desktop app installed plugins into Claude Code and Codex without asking, a user reports

A GitHub issue opened October 25th, which drew wide attention on Hacker News on Tuesday, says Postman 12.33.4 for macOS added plugins to Claude Code and Codex on launch, wrote a remote MCP connection and a CLI, and set a startup hook telling the agent to load Postman's API skill, approving that hook itself. The reporter does not claim any data left the machine. No Postman staff had answered in the thread as of Tuesday. Coding agents load whatever sits in their config, which makes those files a new place for a vendor to reach, with or without consent. SourcesC

Sources

• CDesktop auto-installs Codex/Claude plugins (GitHub issue, user report)github.com

This story ran in the Afternoon Brief of November 3rd 2026.