VQV Signal

AI AT WORK WATCH TECHNICAL

Postman desktop app reportedly installed plugins into Claude Code and Codex

According to a post on X by @manthanguptaa, Postman's desktop app installed plugins into users' Claude Code and Codex setups without clear visibility. The post says one of the plugins included a startup note telling the agent to use Postman for any API work. The author notes that any app on a laptop can now change how a coding agent behaves. The snippet is a short excerpt of the post, so the details beyond these points are not available here.

Source: Scobleizer News Pulse (X) · x.com Found via Robert Scoble’s Scobleizer News Pulse · a post on X, not independently verified Published 2026-11-04T06:35:00+00:00 Detected 2026-11-04T22:19:47+00:00
View original source

According to a post on X by @manthanguptaa, Postman's desktop app installed plugins into users' Claude Code and Codex setups without clear visibility. The post says one of the plugins included a startup note telling the agent to use Postman for any API work. The author notes that any app on a laptop can now change how a coding agent behaves. The snippet is a short excerpt of the post, so the details beyond these points are not available here.

AI-assisted summary based on the listed source.

@manthanguptaa says Postman's desktop app installed plugins into users' Claude Code and Codex setups behind the scenes, including a startup note telling the agent to use Postman for any API work. He points out that any app on a laptop can now change how a coding agent behaves. Why it matters: Coding agents can be...

Developers and teams using Claude Code or Codex may find their coding agents steered by software they did not directly configure. The post frames this as a new security and trust concern, since other local applications may be able to alter agent behavior on the same machine. Users should watch whether Postman or the coding tool providers respond with clearer disclosure or install controls.

Teams using AI at work may want to compare this against current productivity and review workflows.

Signal Strength 92% Technical label WATCH Public Interest 63 Category AI AT WORK Reader Depth TECHNICAL

Signal Strength reflects source quality, relevance, freshness and evidence. Public Interest helps organize discovery; it is not proof of truth.

Public Interest components
Recognizable Entity Score 82 Practical Impact Score 28 Novelty Interest Score 94 Consequence Score 62 Curiosity Score 16 Shareability Score 68

VQV surfaced this signal because it is recent, relevant to AI Coding Tools, connected to Scobleizer News Pulse (X).