Back to articles
DevPickView feed
Hacker NewsHN submitter: sidgarimella
Original published:

Postman silently auto-installs AI plugins and attempts to share all API data

Postman silently auto-installs AI plugins and attempts to share all API data
AI summary
Editorial policy

A user reports that opening Postman on a Mac automatically installed AI plugins and attempted to share all API data without permission.

Key points

  • •Automatic installation of AI plugins was observed immediately after opening Postman on a Mac.
  • •The software attempted to share all API data without user consent.
  • •The user confirmed that no existing duplicate issues were found in the tracker before reporting this.
Read the original(opens in a new tab)
#Security & Misuse#Generative AI Tools & Use#Postman

Related articles

See more
CodeZine

Postman Launches General Availability of 'Fabric Gateway,' a Control Platform for AI Agents(opens in a new tab)

Postman has launched the general availability of Fabric Gateway, an infrastructure platform designed to support the governance and management of AI agents.

CodeZine

Postman、シークレットレスなAPIアクセスを実現する「Passport」を一般提供(opens in a new tab)

API管理ツールPostmanが、認証情報やシークレットをコードに含めずに安全にAPIへアクセスできる「Passport」をGAした

INTERNET Watch

Apple to begin checking 'harmful content' in iCloud public links [Yajiuma Watch]

Apple announced the introduction of a feature to check for harmful content in public iCloud links.

Hacker News

Cuban: Facebook knowingly runs AI deepfake scam ads; docs say $16B fraud revenue

Cuban alleges that Facebook knowingly uses his face in AI-generated scam ads for nonexistent diabetes cures, with documents indicating $16 billion in fraud revenue.

ITmedia

OpenAI Announces Cybersecurity-Specialized 'GPT-6 Cyber', Discovers 81 Unknown Vulnerabilities in Firefox

OpenAI announced the cybersecurity-specialized AI 'GPT-6 Cyber' for defenders, aiming to support rapid protection and modification of critical infrastructure.