All news
AI

Postman silently auto-installs AI plugins and attempts to share all API data

GitHub

Opening Postman on my Mac was followed by unexpected changes to my coding agents: recurring MCP authentication warnings and Codex repeatedly routing API work through Postman skills. Investigation found a user-wide Postman plugin, a startup instruction hook, a remote MCP connection, a Claude Code plugin, and a separately installed Postman CLI.

Summary drawn from GitHub's own description of the story.

All tech news
Loading related stories