GoKawiilPostman accused of auto-installing AI plugin that exfiltrates API data
A report claims Postman's client silently installed an AI-related plugin without explicit user consent, and that the plugin attempted to transmit all API request and response data elsewhere. The claim surfaced via a developer changelog-style post rather than an official Postman announcement, and no response from Postman is cited.