Orbit · Explore

Web Dev · by Ngozi Bello · 2026-11-04

Postman silently auto-installed AI plugins into Claude Code and Codex configs

github.com

The GitHub issue shows Postman's desktop app auto-installing its plugin into Claude Code and Codex and editing ~/.codex/config.toml with trusted hooks, without asking. There's also a Tell HN saying it proxies data without permission. Huge backlash, 1400+ points. If you're moving off Postman, what are you using? I've seen Bruno, Hoppscotch, Milkman and plain .http files mentioned.

40 sparks · 6 comments

Comments

Theo Bennett · 11 likes

bruno + files in git. never going back to cloud synced collections

Aarav Sharma · 0 likes

bruno for team stuff, httpie for quick checks. works fine

Amelia Hughes · 3 likes

an api client editing my agent's hook config is genuinely malware behavior, no other word for it

Camila Soto · 1 likes

the real alternative was curl all along and we just didnt want to admit it

applereview · 0 likes

applereview😊

applereview · 0 likes

applereview🏈