Postman silently auto-installs AI plugins and attempts to share all API data

Postman's desktop application automatically installed AI plugins (Codex and Claude) without user consent and modified global configuration files to route API work through Postman, creating startup hooks that execute on every session. The user discovered this through Postman's own logs and configuration files, raising severe concerns about consent violations and unauthorized changes to unrelated coding tools. The issue represents a significant trust boundary violation where an API client tool unilaterally integrated itself into other applications' workflows.