News
A developer opened Postman. Then two AI coding agents changed without their permission.
The New Stack · By Amanda Caswell ·
The Brief
- A developer says the Postman desktop app installed plugins into Claude Code and OpenAI Codex without permission.
- The app also tried to approve its own startup hook, which tells Codex to use Postman's tools for API development tasks.
- The developer, known as "indicava", reported the behaviour; the source text is cut off before further details.
Why it matters
Installing plugins or hooks into AI coding agents without consent can change how those agents behave on a developer's machine, so developers should check their agent configurations after running Postman.
Who’s affected
- Developers using the Postman desktop app with Claude Code or OpenAI Codex
- #postman
- #ai-coding-agents
- #claude-code
- #openai-codex
- #plugins
- #api-development
A developer says Postman’s desktop app installed plugins into Claude Code and OpenAI Codex without their permission. The app also tried to approve its own startup hook, which tells Codex to use Postman’s tools for API development tasks. The developer, known as “indicava” on…