GoKawiil
Tech News
A report claims Postman's client silently installed an AI-related plugin without explicit user consent, and that the plugin attempted to transmit all API request and response data elsewhere. The claim surfaced via a developer changelog-style post rather than an official Postman announcement, and no response from Postman is cited.
OpenAI has launched new plugins letting ChatGPT connect to iCloud Mail and iCloud Calendar, mirroring existing support for Gmail and Google Calendar. Users must sign in with an Apple account and set up an app-specific password, and the feature works across desktop, web, and iOS on both free and paid ChatGPT tiers. Pro subscribers can also let OpenAI's Dot agent access the same iCloud data.
OpenAI announced that ChatGPT now supports plugins for iCloud Mail and Calendar, letting users link their Apple accounts the way they already can with Gmail. The integration works on web, desktop, and iOS across all ChatGPT plans, and requires signing in with an app-specific password. OpenAI confirmed the plugins also enable compatibility with its proactive agent feature, Dots, for iCloud users for the first time.
Patchstack researchers found hackers exploiting stored XSS vulnerabilities in two unrelated WordPress plugins—Ninja Forms (CVE-2026-94504) and WPC Product Bundles for WooCommerce (CVE-2026-93836)—to plant backdoors and create rogue admin accounts. The campaign, first spotted October 4 against WPC Product Bundles users and a day later against Ninja Forms, injects a malicious script from 'imgcdn1[.]com' into order data or form submissions that executes when an administrator views it, installing a fake plugin disguised as 'WP Smart Thumbnails.'
A new Android app called DroidDeck enables users to run Steam and Steam games with an interface resembling SteamOS. It supports features like Linux apps, Decky plugins, and Steam client in Big Picture mode, aiming to provide a PC gaming experience on Android devices. The setup process involves signing into Steam and installing necessary runtimes, though it requires enabling developer options, which can be complex on newer Android versions.
A technical essay critiques the common architecture behind AI agent 'memory' plugins, describing them as systems that chop conversation transcripts into snippets, store them in vector databases, and retrieve the most similar ones per prompt. The author argues this retrieval-by-similarity approach fails to give agents real understanding of a project, and proposes that agents instead need structured documentation rather than memory snippets.
DeepSeek has launched Harness, an open-source desktop application for macOS and Windows built on Cordis's plugin-based architecture. The tool can also be run as a web UI launched from code, and supports tasks like file organization, coding assistance, research, and background script execution.
Wabi, the AI startup founded by Eugenia Kuyda that let users build apps via prompts, has launched Wabi 2.0, repositioning itself as a messaging app that both converses with users and builds interfaces for them on demand. The invite-only update was announced this week on X, with Kuyda calling it a 'personal agent that does stuff for you and builds the interface you need in the moment.'
OpenAI unveiled updates at its Dev Day event that let developers build dedicated in-app experiences within ChatGPT using plugin extensions, giving third-party tools a spot in the sidebar and interactive panels including file viewers. The company also introduced a Plugin Creator tool, a redesigned submission process for its plugin directory, improved plugin ranking and recommendations, and support for the proposed MCP Events specification to trigger automations from connected apps.
Anthropic has opened a public Claude Marketplace consolidating plugins, connectors, agents and consulting services in one hub. The listing already includes more than 2,000 integrations from companies such as Atlassian, Google, Microsoft, Notion and Salesforce, plus Claude-powered products from partners like CrowdStrike, Cursor, Harvey, Legora, Lovable and Snowflake, alongside integration support from Accenture, Boston Consulting Group and Deloitte. Developers can build connectors using Model Context Protocol and Agent Skills, and companies can apply to list their Claude-based products.
OpenAI announced three updates to ChatGPT Voice mode. The feature now runs on the company's GPT-6 model family (Astra, Sol, and Luna), supports plugins such as email, calendar, and Slack, and works with ChatGPT Work across web and mobile.
Lunacy Audio has released Nova, a platform where developers can create and sell music software instruments assembled from premade effects blocks and AI prompts rather than traditional code. The launch includes 10 initial plug-ins, ranging from lo-fi cassette-style synths to ambient drone generators, built by Lunacy and select partners. A companion host plugin lets users load and switch between Nova instruments inside their digital audio workstation, and instruments can also run in a browser without one.