Postman installed itself into Claude Code and Codex — without asking

Opening Postman on a Mac triggered an upgrade routine its own log calls 'auto-existing-upgrade' — and the log records Codex and Claude Code plugins installed, plus a startup hook that tells the agent to route broad API work through Postman's skill.

The installer code goes further: it writes its own hook's trust hash into Codex's trust store, the approval step that is supposed to be the user's decision. Postman has said it will make the opt-in clearer, especially for existing users.

What the report does not claim matters too: the remote Postman connection never authenticated, so no data exfiltration is established — the scandal is consent, not a proven leak. The issue hit the top of Hacker News on November 3 with more than 1,300 points.