Postman Caught Secretly Installing AI Plugins: Desktop App Altered Claude Code and Codex Without Developer Consent dev.ua