{"slug": "postman-auto-installs-ai-plugins-modifies-your-dev-configs", "title": "Postman Auto-Installs AI Plugins, Modifies Your Dev Configs", "summary": "Postman 12.33.4 silently installed plugins into OpenAI Codex and Anthropic Claude Code, self-approved its own hooks, and routed API data to mcp.postman.com without user consent, according to byteiota. The report describes the API tool modifying developers' configurations and approving its own integration hooks rather than prompting for approval. The behavior matters because it changes what developers running Postman alongside AI coding agents must audit in their local setups.", "body_md": "Postman 12.33.4 silently installed plugins into Codex and Claude Code, self-approved its own hooks, and routed API data to mcp.postman.com without consent.\n\nThe post \nPostman Auto-Installs AI Plugins, Modifies Your Dev Configs\n appeared first on \nbyteiota\n.", "url": "https://wpnews.pro/news/postman-auto-installs-ai-plugins-modifies-your-dev-configs", "canonical_source": "https://byteiota.com/postman-auto-installs-ai-plugins-modifies-your-dev-configs/", "published_at": "2026-11-04 10:16:59+00:00", "updated_at": "2026-11-04 10:28:10.497310+00:00", "lang": "en", "topics": ["ai-agents", "developer-tools", "ai-tools", "agent-protocols"], "entities": ["Postman", "Postman 12.33.4", "OpenAI Codex", "Anthropic Claude Code", "mcp.postman.com", "byteiota"], "also_reported_by": [], "alternates": {"html": "https://wpnews.pro/news/postman-auto-installs-ai-plugins-modifies-your-dev-configs", "markdown": "https://wpnews.pro/news/postman-auto-installs-ai-plugins-modifies-your-dev-configs.md", "text": "https://wpnews.pro/news/postman-auto-installs-ai-plugins-modifies-your-dev-configs.txt", "jsonld": "https://wpnews.pro/news/postman-auto-installs-ai-plugins-modifies-your-dev-configs.jsonld"}}