Postman Plugin in Claude Code or Codex? How to Check and Remove It (12.33.4+)
Postman desktop 12.33.4+ auto-installed a plugin, hook, MCP and CLI into Claude Code and Codex. Exact log text, check commands and removal steps.
BUFFER’S NOTEBOOK
Category: AI Notes
17 articles
Other AI notes: news, security and things I tried that don’t fit a pillar.
Leaked API Key? 5 Steps to Take Now on Anthropic, OpenAI and DeepSeek (2026)
A leaked API key costs money for as long as it stays active. Delete or disable it first, make a new one, then check what it was used for. Anthropic…
Artificial Analysis Intelligence Index v5 Explained: 9 Tests, 4 Equal Categories, and What the Score Really Means (2026)
The Artificial Analysis Intelligence Index is one score built from nine independent tests. Version 5.0, live since October 2026, splits them into Knowledge Work, Coding, Science and General at 25%…
ChatGPT iCloud Mail: How to Connect It Safely, and the Essential Step Most People Miss When Disconnecting (2026)
ChatGPT iCloud Mail connects with an Apple app-specific password, never your regular Apple password. Disconnecting it in ChatGPT does not revoke that password, so remove it at account.apple.com too. Checked…
DeepSeek V5 Release Date: The Viral “V5 Leak” Is Just Test Code (Oct 2026)
There is no DeepSeek V5 release date. The viral "V5, V5-open, V5-next" code is fake data in a DeepSeek Harness unit test from September 24. The latest official model is…
AI Agent Security: Don’t Give an Agent Your Bank Password (7 Essential Checks)
Bank of America told customers not to share their login with AI agents. Here is what to do instead: bank-approved connections, app-specific passwords, virtual cards, confirmations and revoking access.
Anthropic IPO: How to Buy ANT Stock and 5 Essential Things to Watch
The Anthropic IPO S-1 is out. What it confirms, where the $80.7 billion loss really comes from, why Class A shares carry almost no vote, how US IPO shares reach…
LiteLLM Supply Chain Attack: How a Clean Repo Shipped a Credential Stealer
LiteLLM supply chain attack, reconstructed: how 1.107.0 wheels and Docker tags shipped a stealer, a Beijing-time timeline, what it took, and how to clean up.
PHP CVE-2026-109618: Urgent Patch Night as Panels Scramble
PHP CVE-2026-109618 and CVE-2026-109619 hit CVSS 9.2 tonight. What RunCloud, Prostack and Cloudflare did, and how to patch your VPS.
Remove Ads on Android TV With Claude Code: 5 Steps, No Root, Reversible
You paid for the TV. The ads apparently came free. If you want to remove ads on Android TV sets like Xiaomi, TCL or Sony without rooting anything, there’s an…
The AI’s research report didn’t match its own notes
The model’s notes discussed the risk of selecting favorable results. Its final report did not disclose the selection. Reviewers also found detailed descriptions of mechanisms that did nothing in the…
The bank attacker who asked AI for résumé help
The attacker wanted a security researcher résumé that included the results of the attacks. Requests about selling leaked data were in the records too. Investigators found the conversations on the…