Postman, Claude Code, and the Plugin You Never Installed
On 25 October 2026, a developer reported that updating Postman to version 12.33.4 silently installed Postman plugins into Claude Code and Codex, and registered its startup hook as trusted. It matters because a coding agent runs with your credentials and codebase, so anything that changes what it loads changes what it can do for you. Key takeaways Postman 12.33.4 allegedly installed its own…
In October 2026, a developer reported that updating Postman to version 12.33.4 silently installed plugins into Claude Code and Codex, and registered its startup hook as trusted. The report highlights that a coding agent, which runs with your credentials and codebase, can be altered by this change, potentially affecting how it handles API work.
The key takeaway is that Postman 12.33.4 allegedly installed its own plugins into Claude Code and Codex during an ordinary app update, adding a SessionStart hook that steers API work towards Postman's skill without explicit user consent. While the report provides evidence of changes to config files and plugin directories, it does not confirm whether API data was shared.
The incident raises concerns about the implications of silent plugin installations in coding agents, as it represents a change to the agent's behavior that occurs before any user interaction.
Brief written by urgent.news from Dev.to's own syndicated text. Machine-written — may contain errors; check the original before relying on it.
