Postman desktop 12.33.4 installs Claude Code and Codex plugins without consent

A developer reported that Postman’s desktop app automatically installed plugins for Claude Code and OpenAI Codex without permission and attempted to approve its own startup hook. The incident has raised concerns among developers about third-party applications modifying coding agent environments and settings without explicit consent. Open article →