PulseAugur
EN
LIVE 18:43:35

Postman accused of silently installing AI plugins, sharing API data

By PulseAugur Editorial · [4 sources] ·

Postman, an API development platform, has been found to silently auto-install AI plugins, including those for Claude Code and Codex. This installation process also attempts to configure these plugins to route all API data through Postman, raising significant privacy and consent concerns among users. The software's behavior has been described as a severe trust-boundary problem, as it modifies other coding agents and attempts to approve its own instruction hooks without explicit user permission. AI

IMPACT Raises concerns about user consent and data privacy in API development tools integrating AI.

RANK_REASON User-reported issue detailing unexpected software behavior and privacy concerns.

Read on Mastodon — mastodon.social →

AI-generated summary · Google Gemini · from 4 sources. How we write summaries →

Postman accused of silently installing AI plugins, sharing API data

How we ranked this

Signal score
24 / 100
Composite score across the factors below. Higher = stronger signal that this story matters right now.
Newsworthiness bucket
Tool
User-reported issue detailing unexpected software behavior and privacy concerns.
Source corroboration
4 independent sources
Strong cross-source corroboration — multiple independent publishers covered this within the clustering window.
Topics
product, safety
Editorial topic classification. Feeds into how the story surfaces on /topic/<slug> hub pages and into the per-entity coverage mix.
AI-industry relevance
High
Clearly on-topic for AI-industry coverage.
Story freshness
Breaking (< 6h)
Fresh story with cross-source coverage still developing. Ranking may shift as more sources report.
Coverage growth since scoring
+1 source(s) since last score
New sources have picked up this story since our last re-score. Score will update on the next scoring pass.

Full methodology in our editorial standards.

COVERAGE [4]

  1. Hacker News — AI stories ≥50 points TIER_1 English(EN) · sidgarimella ·

    Postman silently auto-installs AI plugins and attempts to share all API data

  2. Mastodon — fosstodon.org TIER_1 English(EN) · [email protected] ·

    Postman silently auto-installs AI plugins and attempts to share all API data https:// github.com/postmanlabs/postman -app-support/issues/14370 # ai # github

    Postman silently auto-installs AI plugins and attempts to share all API data https:// github.com/postmanlabs/postman -app-support/issues/14370 # ai # github

    LINKS github.com/…/14370 github.com/…/postman
  3. Mastodon — mastodon.social TIER_1 English(EN) · feralcortex ·

    [CYCLE #059 // SHA-256: 1ad8634ab688] Intercept: "Postman silently auto-installs AI plugins and attempts to share all API data" -> AX-05 Silent plugin installat

    [CYCLE #059 // SHA-256: 1ad8634ab688] Intercept: "Postman silently auto-installs AI plugins and attempts to share all API data" -> AX-05 Silent plugin installations do not break our architecture; they validate it. $0 Free Probe / Audit: https:// feralcortex.com/cycle/59 # AIAgent…

    LINKS feralcortex.com/…/59
  4. Mastodon — mastodon.social TIER_1 English(EN) · hacker_news_bot ·

    📜 Latest Top Story on # HackerNews : Postman silently auto-installs AI plugins and attempts to share all API data 🔍 Original Story: https:// github.com/postmanl

    📜 Latest Top Story on # HackerNews : Postman silently auto-installs AI plugins and attempts to share all API data 🔍 Original Story: https:// github.com/postmanlabs/postman -app-support/issues/14370 👤 Author: sidgarimella ⭐ Score: 88 💬 Number of Comments: 14 🕒 Posted At: 2026-11-0…

    LINKS github.com/…/14370 github.com/…/postman

RELATED ENTITIES

RELATED TOPICS