{
  "id": 18001891,
  "title": "Postman installed itself into Codex and Claude",
  "url": "https://urgent.news/2026/11/03/postman-installed-itself-into-codex-and-claude",
  "topic": "ai",
  "section": "AI",
  "published": "2026-11-03T18:28:46.000Z",
  "source": {
    "name": "Dev.to",
    "slug": "dev-to",
    "url": "https://dev.to/frankchu/postman-installed-itself-into-codex-and-claude-e38"
  },
  "original_language": "en",
  "account": "On October 24, 2026, Postman's app-support team installed its plugin into two coding agents, Codex and Claude Code, without the user's consent. The installer then wrote its own trust record for its startup hook, bypassing the user's approval. This occurred silently, without any API data being shown to leave the machine, though the remote MCP connection failed authentication. The headline of the story, which suggested that Postman had shared all API data, is inaccurate. The issue is documented in a GitHub issue filed against Postman's app-support tracker, which provides detailed logs from the incident. The three key claims are that the startup hook reroutes broad API work, the installer approves its own hook, and the remote MCP endpoint fails to connect. While the issue was not reproducible on a clean Mac, it highlights the need for explicit user consent for these actions. The recommended fix is to prevent automatic agent-plugin installation for existing desktop users and to narrow the startup instruction to explicit Postman requests.",
  "summary": "Opening Postman on October 24 installed its plugin into two coding agents the user never asked it to touch — Codex and Claude Code — and the installer's own code then wrote the trust record for its own startup hook. No API data was shown to leave the machine: the remote MCP connection failed authentication, and the reporter explicitly does not claim exfiltration. That correction matters, because…",
  "key_points": [],
  "editors_take": null,
  "illustration": null,
  "coverage": {
    "outlets": 6,
    "also_reported_by": [
      {
        "outlet": "OpenAI",
        "title": "Qodo builds context into AI code review with Codex",
        "url": "https://urgent.news/2026/11/02/qodo-builds-context-into-ai-code-review-with-codex",
        "published": "2026-11-02T00:00:00.000Z"
      },
      {
        "outlet": "XDA Developers",
        "title": "I asked Claude Code, Codex, and Antigravity to build the same Android app, and only one made something I'd actually install",
        "url": "https://urgent.news/2026/11/02/i-asked-claude-code-codex-and-antigravity-to-build-the-same-android",
        "published": "2026-11-02T17:31:23.000Z"
      },
      {
        "outlet": "ZDNet",
        "title": "Is Claude Code truly faster with message threads? I did the math on my logs",
        "url": "https://urgent.news/2026/11/03/is-claude-code-truly-faster-with-message-threads-i-did-the-math-on-my",
        "published": "2026-11-03T07:28:00.000Z"
      },
      {
        "outlet": "The New Stack",
        "title": "Anthropic speeds up Claude Code with message threads. But your token bill stays the same.",
        "url": "https://urgent.news/2026/11/03/anthropic-speeds-up-claude-code-with-message-threads-but-your-token",
        "published": "2026-11-03T13:46:14.000Z"
      },
      {
        "outlet": "Simon Willison from Simon Willison’s Newsletter",
        "title": "to experiment with Claude’s new Code Interpreter",
        "url": "https://urgent.news/2026/11/03/to-experiment-with-claudes-new-code-interpreter",
        "published": "2026-11-03T18:37:30.000Z"
      }
    ]
  },
  "ai_generated": true,
  "disclaimer": "Summaries, key points and the editor’s take are written by software from other outlets’ reporting and may contain errors — always check the linked original."
}