← Azimuth Daily
Capturing data…
Capturing data…
FRI, 6 NOV · 97 ITEMS
"Postman auto-installs AI plugins and attempts to share API data" — Hacker News (best) · AI & Technology
, a widely used development and testing tool, has been caught silently installing AI-related plugins (specifically for tools like OpenAI Codex and Anthropic's Claude Code) and attempting to share users' API request data without explicit consent. The behavior was documented in a GitHub issue where logs show the installer triggers an 'auto-existing-upgrade' event that installs these plugins and adds startup hooks, effectively exfiltrating API collections and potentially secrets without the user's knowledge.
The claim is anchored in a detailed GitHub issue (postmanlabs/postman-app-support#14370) that includes installation logs and user reports, making it a primary-source complaint. While the issue is not an official Postman acknowledgment, the forensic evidence (specific log entries, hook files) is strong and has been corroborated by multiple tech news outlets and developer discussions on Hacker News, lending high credibility to the report.
This story is genuinely new, first reported on November 3, 2026, with no prior circulation.