A Postman desktop app update, version 12.33.4, installed plugins into Claude Code and OpenAI Codex without asking users, according to a detailed GitHub report; other users also reported entries in Cursor and the GitHub Copilot CLI. Postman says it is reverting the change, but reverting does not remove what is already installed.