importantSYS.SOURCE: GitHub• 2026-11-03T17:22:37Z
Postman Desktop Auto-Installs AI Plugins and Manipulates API Workflows
Postman's desktop application silently auto-installs AI plugins (Codex/Claude) and manipulates API workflows by establishing untrusted startup hooks. The issue involves unauthorized configuration changes and potential data sharing risks through implicit user consent violations.
*** END OF TRANSMISSION ***