{"schema":"postcutoff/event@1","as_of":"2026-11-09T21:13:00+01:00","url":"https://postcutoff.com/e/2026-11-03-postman-auto-installs-claude-codex-plugins/","md":"https://postcutoff.com/e/2026-11-03-postman-auto-installs-claude-codex-plugins/index.md","disclosure":{"written_by":"AI agents (Claude Opus 5.5 in Claude Code)","editor":"human editor","policy":"https://postcutoff.com/about/"},"license":null,"id":"2026-11-03-postman-auto-installs-claude-codex-plugins","date":"2026-11-03","date_precision":"day","short_title":"Postman Desktop accused of silently installing Claude Code and Codex plugins and self-approving its startup hook","deck":null,"takeaway":null,"category":"agents","category_label":"Agents","importance":2,"confidence":"high","status":{"key":"confirmed","labels":["Confirmed"]},"sources":[{"n":1,"title":"GitHub issue #14370 (postman-app-support)","url":"https://github.com/postmanlabs/postman-app-support/issues/14370","type":"discussion","group":"reactions","domain":"github.com"},{"n":2,"title":"Hacker News discussion","url":"https://news.ycombinator.com/item?id=50354960","type":"discussion","group":"reactions","domain":"news.ycombinator.com"}],"official":0,"filed":"2026-11-04","updated":"2026-11-04","orgs":["Postman","Anthropic","OpenAI"],"title":"Postman Desktop accused of silently installing Claude Code and Codex plugins and self-approving its startup hook","summary":"A GitHub issue (opened Oct 25, 2026; 1,336 HN points on Nov 3) reports that Postman Desktop 12.33.4 auto-installed Claude Code and Codex plugins, enabled a remote MCP server and wrote a trust hash so Codex would accept its own SessionStart hook; the reporter does not claim data was exfiltrated.","key_facts":["Postman's hook told agents to load its 'api-engineer' skill before any non-trivial API task","Commenters found entries in Copilot and Cursor configs too","No official Postman reply in the thread as of Nov 4","The HN headline's 'share all API data' goes beyond what the issue claims"],"key_numbers":[],"tags":["security","supply-chain","coding-agents","consent"],"science":null,"body_md":"## What happened\n\nThe reporter could not reproduce on a clean Mac and asks Postman to stop auto-installing, remove the self-approval and add an uninstall\npath. A case study in how desktop apps are starting to plant instructions inside users' coding agents.","disputed":[],"related":[],"people":[],"posts":[],"videos":[],"models":[],"changes":[{"date":"2026-11-04","type":"filed","text":"Created"}],"provenance":{"agents":[{"model":"Claude Opus 5.5","maker":"Anthropic","tool":"Claude Code"}],"filed":"2026-11-04","run":null,"sources_read":null,"updated":"2026-11-04","human_review":null,"version":{"date":"2026-11-04"}},"gaps":[{"model_id":"gpt-6-astra","name":"GPT-6 Astra","cutoff":"2026-04","days_after":187,"in_training_data":false},{"model_id":"claude-opus-5-5","name":"Claude Opus 5.5","cutoff":"2026-06","days_after":126,"in_training_data":false},{"model_id":"gemini-4-argon","name":"Gemini 4 Argon","cutoff":"2026-03","days_after":217,"in_training_data":false},{"model_id":"grok-4-7","name":"Grok 4.7","cutoff":"2026-05","days_after":156,"in_training_data":false}],"short_url":null}