Postman Caught Secretly Installing AI Plugins: Desktop App Altered Claude Code and Codex Without Developer Consent

What exactly did Postman do?

The application logs for October 24 recorded an automatic update that added the Postman extension to Claude Code and Codex without the user's knowledge, The New Stack reports . At the same time, the program arbitrarily modified the configuration file ~/.codex/config.toml, enabling its own plugin, adding a new marketplace, and installing additional CLI tools.

Moreover, Postman bypassed the standard security check: instead of receiving manual confirmation from the developer, the installer generated trust hashes itself and automatically approved its own autorun script in Codex.

Finally, the settings specified a connection to a remote MCP server ([https://mcp.postman.com/mcp](https://mcp.postman.com/mcp)), which, due to the lack of authentication, caused systematic errors in the operation of the AI ​​assistant.

Thanks to these manipulations, Postman forced the Codex AI agent to use its own tools by default to perform most API development tasks, ignoring the developer's initial settings.

Reaction from the community and security experts

This behavior caused a wave of outrage among IT professionals at GitHub and X.

Cybersecurity researcher Frank Denis called such integrations "garbage" and criticized the app's attempts to grant itself trust rights.

Other developers emphasize that such actions are unacceptable and pose serious risks to corporate security.

There were also speculations online about the possible interception and sending of Postman API data (in particular from developer Siddharth Garimella), but the report on GitHub found no evidence of a data leak - it only refers to an unauthorized change in configurations.

What developers require

The report author demands that Postman stop forcing plugin installation and return control over script approval to users. Additionally, the standard uninstallation of Postman currently does not completely clean up modified AI agent configurations, saved MCP connections, and installed CLI tools.

Experts recommend that developers immediately check their Claude Code and Codex settings for unfamiliar plugins, autorun hooks, or third-party MCP connections.

Previously, dev.ua has already covered similar risks and unsolicited activity of autonomous assistants. In particular, AI agents have already started to independently look for work in the media , which is why one publication even switched to receiving pitches exclusively via phone calls.

At the same time, much more serious incidents are being recorded in the security sector: an Accenture employee allegedly connected Claude Code's personal account to the US Department of Defense's secure system, as a result of whichthe AI ​​agent had access to internal data for about two months and, probably, transferred passwords to a third-party site .

Additional concern was also raised by an experiment by the startup Cathedral, whose AI agents took less than 12 hours to penetrate Anthropic's internal systems through vulnerabilities in corporate software and gain access to Slack correspondence, meeting records, and employee salary data.

A Ukrainian created a local opensource alternative to Postman with a built-in MCP server. How Voleeo works

On the topic

A Ukrainian created a local opensource alternative to Postman with a built-in MCP server. How Voleeo works

The CDTO of Lviv region stated that his successor could be an AI agent

On the topic

The CDTO of Lviv region stated that his successor could be an AI agent

OpenAI AI agents found a way to bypass isolation through the processor cache: how the hidden communication channel works

On the topic

OpenAI AI agents found a way to bypass isolation through the processor cache: how the hidden communication channel works

AI agents were given a memory test: how they learn from past mistakes

On the topic

AI agents were given a memory test: how they learn from past mistakes

Read the country's main IT news in our Telegram

On the topic

Read the country's main IT news in our Telegram