A developer opened Postman. Then two AI coding agents changed without their permission.
A developer reported that Postman's desktop app (v12.33.4 on macOS) silently installed plugins into Claude Code and OpenAI Codex, modifying configuration files to enable a Postman skill and auto-approve a session-start hook that instructs Codex to use Postman's tools for API tasks without explicit user consent. The installer bypasses the manual review process by writing the hook's trusted hash directly to Codex's config, raising security concerns about third-party apps altering AI coding agent behavior without opt-in.