[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"news-post-\u002Fnews\u002Fpostman-desktop-auto-installs-claude-code-codex-plugins":3,"news-related-en-\u002Fnews\u002Fpostman-desktop-auto-installs-claude-code-codex-plugins":265,"hreflang-postman-auto-install-agent-plugins-2026-11":285},{"doc":4,"redirect":8},{"id":5,"title":6,"author":7,"author_avatar":8,"body":9,"category":246,"date":247,"description":248,"extension":249,"image":250,"meta":251,"navigation":252,"path":253,"seo":254,"seoDescription":255,"seoTitle":256,"stem":257,"tags":258,"translationKey":263,"updatedAt":8,"__hash__":264},"news_en\u002Fnews\u002Fpostman-desktop-auto-installs-claude-code-codex-plugins.md","Postman's desktop app installed its own plugins into Claude Code and Codex","Paul Lefizelier",null,{"type":10,"value":11,"toc":236},"minimark",[12,30,45,50,71,94,97,101,114,125,129,140,143,147,160,175,179,182,226,229,233],[13,14,15,16,24,25,29],"p",{},"On 25 October 2026 a developer opened ",[17,18,23],"a",{"href":19,"rel":20,"target":22},"https:\u002F\u002Fgithub.com\u002Fpostmanlabs\u002Fpostman-app-support\u002Fissues\u002F14370",[21],"nofollow","_blank","issue #14370"," on Postman's support tracker under the title \"",[26,27,28],"span",{},"SEVERE"," Desktop auto-installs Codex\u002FClaude plugins; installer attempts to trust its own startup hook\". The report says that opening the Postman desktop app on a Mac was followed by changes to the developer's coding agents: Codex kept routing API work through Postman skills and showed recurring MCP authentication warnings.",[13,31,32,33,38,39,44],{},"The issue got its first reply on 2 November. On 3 November it was posted to ",[17,34,37],{"href":35,"rel":36,"target":22},"https:\u002F\u002Fnews.ycombinator.com\u002Fitem?id=50354960",[21],"Hacker News",", where it passed 1,100 points, and the GitHub thread passed 30 comments. The same day, Postman's head of product, Sarabmeet Kallar, told ",[17,40,43],{"href":41,"rel":42,"target":22},"https:\u002F\u002Fruntimewire.com\u002Farticle\u002Fpostmans-head-of-product-says-it-will-make-ai-agent-plugin-o-7933b7",[21],"RuntimeWire"," that the company will make the opt-in clearer, especially for existing users.",[46,47,49],"h2",{"id":48},"what-the-report-found","What the report found",[13,51,52,53,57,58,62,63,66,67,70],{},"The reporter ran Postman desktop 12.33.4. According to the ",[17,54,56],{"href":19,"rel":55,"target":22},[21],"issue",", Postman's own log on that Mac, dated 24 October 2026, records an install with the source ",[59,60,61],"code",{},"auto-existing-upgrade"," and the results ",[59,64,65],{},"claude-code:installed"," and ",[59,68,69],{},"codex:installed",". The report lists what that run left behind:",[72,73,74,78,81,88,91],"ul",{},[75,76,77],"li",{},"a user-wide Postman plugin and a Postman marketplace in Codex's global configuration;",[75,79,80],{},"a startup instruction hook for Codex;",[75,82,83,84,87],{},"a remote MCP connection to ",[59,85,86],{},"mcp.postman.com",";",[75,89,90],{},"a Postman plugin enabled in Claude Code's user settings;",[75,92,93],{},"a Postman command-line tool in the user's home folder.",[13,95,96],{},"The remote MCP connection never worked on that machine. Codex logged \"Auth required\" when it tried to start the Postman server. The reporter is explicit that the report \"does not claim to establish data exfiltration\". The Hacker News title says the app \"attempts to share all API data\"; the issue itself does not show that.",[46,98,100],{"id":99},"the-hook-that-tells-the-agent-what-to-do","The hook that tells the agent what to do",[13,102,103,104,109,110,113],{},"The startup hook is the part that changed how the agents behaved. The text it injects lives in Postman's public ",[17,105,108],{"href":106,"rel":107,"target":22},"https:\u002F\u002Fgithub.com\u002Fpostmanlabs\u002Fpostman-plugin\u002Fblob\u002Fmain\u002Fhooks\u002Fsession-start-context.md",[21],"plugin repository"," and, on the current main branch, opens with \"You have the Postman plugin.\" It then tells the agent: \"Before responding to any non-trivial API engineering task — designing, implementing, mocking, testing, monitoring, documenting, or deploying an API or Postman Flow — load the ",[59,111,112],{},"postman:api-engineer"," skill and follow it.\" The same file says project instruction files such as AGENTS.md or CLAUDE.md take precedence over it.",[13,115,116,117,124],{},"The reporter argues that hook trust \"must be decided by the user in the agent host\". The issue points to the installer source, where a function in ",[17,118,121],{"href":119,"rel":120,"target":22},"https:\u002F\u002Fgithub.com\u002Fpostmanlabs\u002Fpostman-plugin\u002Fblob\u002Fmain\u002Finstaller\u002Fsrc\u002Fhosts\u002Fcodex-hooks.ts",[21],[59,122,123],{},"codex-hooks.ts"," carries the comment \"Approves only Postman's current hook after installation\" and writes a trusted hash for that hook into Codex's settings. The reporter found such a record on the affected Mac, but adds that it \"does not prove who created that specific record\".",[46,126,128],{"id":127},"other-developers-saw-the-same-thing","Other developers saw the same thing",[13,130,131,132,136,137,139],{},"On 3 November a second user ",[17,133,135],{"href":19,"rel":134,"target":22},[21],"posted logs"," from a later build. Postman updated from 12.31.3 to 12.35.1 at launch, then the same ",[59,138,61],{}," source installed the CLI and the Claude Code and Codex plugins, and noted that Cursor already had the plugin. That user found no hook trust record in Codex's settings and wrote that they had no evidence data was uploaded.",[13,141,142],{},"Another commenter on the same thread found Postman entries in GitHub Copilot's settings file, and reported that the uninstall option inside Postman did not remove them from Copilot.",[46,144,146],{"id":145},"what-postman-says","What Postman says",[13,148,149,150,155,156,159],{},"A reply posted on the issue at 23:36 UTC on 3 November, written in the company's name, says Postman bundles the CLI and agent plugins with the desktop app \"because many users had trouble installing and wiring them up separately\". It says this is mentioned on the download page and in the update flow, that each component can be removed from inside the app, and that Postman is \"reviewing the hook approval and session-start behavior\". ",[17,151,154],{"href":152,"rel":153,"target":22},"https:\u002F\u002Ffourweekmba.com\u002Fai-postman-users-say-app-auto-installed-claude-codex-plugins\u002F",[21],"FourWeekMBA"," notes that GitHub does not mark the account that posted it as a Postman member. The statement Kallar sent to ",[17,157,43],{"href":41,"rel":158,"target":22},[21]," through Postman's press agency gives the same explanation.",[13,161,162,163,168,169,174],{},"The ",[17,164,167],{"href":165,"rel":166,"target":22},"https:\u002F\u002Fwww.postman.com\u002Fdownloads\u002F",[21],"Postman download page"," now says \"The Postman app includes Postman CLI & Postman plugins\". A commenter on the issue linked a ",[17,170,173],{"href":171,"rel":172,"target":22},"https:\u002F\u002Fweb.archive.org\u002Fweb\u002F20261026090707\u002Fhttps:\u002F\u002Fwww.postman.com\u002Fdownloads\u002F",[21],"Wayback Machine copy"," of the page from 26 October and said that sentence was not there at the time.",[46,176,178],{"id":177},"what-to-check-on-your-machine","What to check on your machine",[13,180,181],{},"If you have Postman desktop installed and use a coding agent, the files named in the issue are the places to look:",[72,183,184,202,214,220],{},[75,185,186,189,190,193,194,197,198,201],{},[59,187,188],{},"~\u002F.codex\u002Fconfig.toml"," for a ",[59,191,192],{},"postman"," marketplace, a ",[59,195,196],{},"postman@postman"," plugin and any ",[59,199,200],{},"hooks.state"," entry for it;",[75,203,204,66,207,210,211,87],{},[59,205,206],{},"~\u002F.claude\u002Fsettings.json",[59,208,209],{},"~\u002F.claude\u002Fplugins\u002Finstalled_plugins.json"," for ",[59,212,213],{},"postman@claude-plugins-official",[75,215,216,219],{},[59,217,218],{},"~\u002F.copilot\u002Fsettings.json"," for a Postman marketplace or plugin;",[75,221,222,225],{},[59,223,224],{},"~\u002F.local\u002Fbin\u002Fpostman"," for the CLI.",[13,227,228],{},"Commenters on the thread point to the app menu Help > Postman CLI and Plugins to uninstall the agent plugin, with the caveat above about Copilot.",[46,230,232],{"id":231},"why-it-matters","Why it matters",[13,234,235],{},"Coding agents now read standing instructions from plugins, hooks and MCP servers. Whoever writes those files shapes what the agent does on the next task. This report shows one installed app writing them for agents it does not own, on an update the user did not configure. The fix Postman describes is a clearer opt-in. The issue's author asks for more: no automatic installs for existing users, and no installer approving its own hook.",{"title":237,"searchDepth":238,"depth":238,"links":239},"",2,[240,241,242,243,244,245],{"id":48,"depth":238,"text":49},{"id":99,"depth":238,"text":100},{"id":127,"depth":238,"text":128},{"id":145,"depth":238,"text":146},{"id":177,"depth":238,"text":178},{"id":231,"depth":238,"text":232},"tools","2026-11-04T08:25:00","A GitHub issue shows Postman desktop adding its plugins, a startup hook, a remote MCP server and a CLI to developers' coding agents through an automatic upgrade. Postman says it will make the opt-in clearer for existing users.","md","\u002Fimages\u002Fnews\u002Fpostman-auto-installs-ai-coding-agent-plugins.jpg",{},true,"\u002Fnews\u002Fpostman-desktop-auto-installs-claude-code-codex-plugins",{"title":6,"description":248},"Postman desktop added plugins, a startup hook and an MCP server to Claude Code and Codex without asking, a GitHub issue shows. Postman says it will make the opt-in clearer.","Postman auto-installed plugins into Claude Code and Codex","news\u002Fpostman-desktop-auto-installs-claude-code-codex-plugins",[192,259,260,261,262],"claude-code","codex","coding-agents","security","postman-auto-install-agent-plugins-2026-11","0iZjBzSMWXi3C6HADenFO7youNFIufMvkYEwIqOEan4",[266,273,279],{"title":267,"description":268,"path":269,"date":270,"image":271,"category":272},"Google says LLMjacking runs up $100,000 a day in stolen AI usage","On 2 November 2026 Google Threat Intelligence Group described LLMjacking: attackers take over a company's access to AI models and resell it through 'LLM Mixers'. Some victims paid more than $100,000 in a day and up to $1 million in total.","\u002Fnews\u002Fgoogle-llmjacking-llm-mixers-stolen-ai-keys","2026-11-04T08:30:00","\u002Fimages\u002Fnews\u002Fgoogle-llmjacking-llm-mixers.jpg","ai",{"title":274,"description":275,"path":276,"date":277,"image":278,"category":272},"OpenAI says ChatGPT now handles a fifth of Google's search volume","At an OpenAI dinner in New York on 2 November 2026, ChatGPT consumer product lead Adam Fry said ChatGPT's search-like queries equal roughly one-fifth of Google's, and that weekly users rose from 1 billion to 1.2 billion in two months.","\u002Fnews\u002Fchatgpt-search-one-fifth-google-1-2-billion-weekly-users","2026-11-04T08:20:00","\u002Fimages\u002Fnews\u002Fchatgpt-search-one-fifth-google-volume.jpg",{"title":280,"description":281,"path":282,"date":283,"image":284,"category":272},"OpenAI says Astra and Codex are now drafting physical products","On 3 November 2026 OpenAI described internal work where models design enclosures, boards, and CAD. Two people built a Codex device with Astra in under a week. A newer internal model scored 0.875 on BenchCAD 2.0, against 0.594 for GPT-6 Astra.","\u002Fnews\u002Fopenai-astra-engineering-physical-products-cad","2026-11-03T16:10:00","\u002Fimages\u002Fnews\u002Fopenai-physical-engineering-astra-cad.jpg",{"en":286,"fr":427,"es":8},{"id":5,"title":6,"author":7,"author_avatar":8,"body":287,"category":246,"date":247,"description":248,"extension":249,"image":250,"meta":424,"navigation":252,"path":253,"seo":425,"seoDescription":255,"seoTitle":256,"stem":257,"tags":426,"translationKey":263,"updatedAt":8,"__hash__":264},{"type":10,"value":288,"toc":416},[289,296,304,306,317,331,333,335,342,349,351,358,360,362,370,378,380,382,410,412,414],[13,290,15,291,24,294,29],{},[17,292,23],{"href":19,"rel":293,"target":22},[21],[26,295,28],{},[13,297,32,298,38,301,44],{},[17,299,37],{"href":35,"rel":300,"target":22},[21],[17,302,43],{"href":41,"rel":303,"target":22},[21],[46,305,49],{"id":48},[13,307,52,308,57,311,62,313,66,315,70],{},[17,309,56],{"href":19,"rel":310,"target":22},[21],[59,312,61],{},[59,314,65],{},[59,316,69],{},[72,318,319,321,323,327,329],{},[75,320,77],{},[75,322,80],{},[75,324,83,325,87],{},[59,326,86],{},[75,328,90],{},[75,330,93],{},[13,332,96],{},[46,334,100],{"id":99},[13,336,103,337,109,340,113],{},[17,338,108],{"href":106,"rel":339,"target":22},[21],[59,341,112],{},[13,343,116,344,124],{},[17,345,347],{"href":119,"rel":346,"target":22},[21],[59,348,123],{},[46,350,128],{"id":127},[13,352,131,353,136,356,139],{},[17,354,135],{"href":19,"rel":355,"target":22},[21],[59,357,61],{},[13,359,142],{},[46,361,146],{"id":145},[13,363,149,364,155,367,159],{},[17,365,154],{"href":152,"rel":366,"target":22},[21],[17,368,43],{"href":41,"rel":369,"target":22},[21],[13,371,162,372,168,375,174],{},[17,373,167],{"href":165,"rel":374,"target":22},[21],[17,376,173],{"href":171,"rel":377,"target":22},[21],[46,379,178],{"id":177},[13,381,181],{},[72,383,384,394,402,406],{},[75,385,386,189,388,193,390,197,392,201],{},[59,387,188],{},[59,389,192],{},[59,391,196],{},[59,393,200],{},[75,395,396,66,398,210,400,87],{},[59,397,206],{},[59,399,209],{},[59,401,213],{},[75,403,404,219],{},[59,405,218],{},[75,407,408,225],{},[59,409,224],{},[13,411,228],{},[46,413,232],{"id":231},[13,415,235],{},{"title":237,"searchDepth":238,"depth":238,"links":417},[418,419,420,421,422,423],{"id":48,"depth":238,"text":49},{"id":99,"depth":238,"text":100},{"id":127,"depth":238,"text":128},{"id":145,"depth":238,"text":146},{"id":177,"depth":238,"text":178},{"id":231,"depth":238,"text":232},{},{"title":6,"description":248},[192,259,260,261,262],{"id":428,"title":429,"author":7,"author_avatar":8,"body":430,"category":246,"date":247,"description":628,"extension":249,"image":250,"meta":629,"navigation":252,"path":630,"seo":631,"seoDescription":632,"seoTitle":633,"stem":634,"tags":635,"translationKey":263,"updatedAt":8,"__hash__":638},"news_fr\u002Ffr\u002Fnews\u002Fpostman-desktop-installe-plugins-claude-code-codex.md","L'app desktop Postman a installé ses propres plugins dans Claude Code et Codex",{"type":10,"value":431,"toc":620},[432,443,454,458,475,495,498,502,513,522,526,537,540,544,555,568,572,575,610,613,617],[13,433,434,435,439,440,442],{},"Le 25 octobre 2026, un développeur a ouvert le ",[17,436,438],{"href":19,"rel":437,"target":22},[21],"ticket #14370"," sur le support de Postman, sous le titre « ",[26,441,28],{}," Desktop auto-installs Codex\u002FClaude plugins; installer attempts to trust its own startup hook ». Il y explique qu'après avoir ouvert l'application desktop Postman sur son Mac, ses agents de code ont changé de comportement : Codex faisait passer ses tâches d'API par les skills de Postman et affichait des alertes d'authentification MCP à répétition.",[13,444,445,446,449,450,453],{},"Le ticket a reçu sa première réponse le 2 novembre. Le 3 novembre, il a été publié sur ",[17,447,37],{"href":35,"rel":448,"target":22},[21],", où il a dépassé 1 100 points, et le fil GitHub a dépassé 30 commentaires. Le même jour, le responsable produit de Postman, Sarabmeet Kallar, a déclaré à ",[17,451,43],{"href":41,"rel":452,"target":22},[21]," que l'entreprise allait rendre l'opt-in plus clair, en particulier pour les utilisateurs existants.",[46,455,457],{"id":456},"ce-que-montre-le-ticket","Ce que montre le ticket",[13,459,460,461,465,466,468,469,471,472,474],{},"L'auteur utilisait Postman desktop 12.33.4. D'après le ",[17,462,464],{"href":19,"rel":463,"target":22},[21],"ticket",", le journal de Postman sur ce Mac, daté du 24 octobre 2026, enregistre une installation avec la source ",[59,467,61],{}," et les résultats ",[59,470,65],{}," et ",[59,473,69],{},". Le ticket liste ce que cette exécution a laissé :",[72,476,477,480,483,489,492],{},[75,478,479],{},"un plugin Postman et une marketplace Postman dans la configuration globale de Codex ;",[75,481,482],{},"un hook d'instructions au démarrage pour Codex ;",[75,484,485,486,488],{},"une connexion MCP distante vers ",[59,487,86],{}," ;",[75,490,491],{},"un plugin Postman activé dans les réglages utilisateur de Claude Code ;",[75,493,494],{},"un outil en ligne de commande Postman dans le dossier personnel.",[13,496,497],{},"La connexion MCP distante n'a jamais fonctionné sur cette machine : Codex a enregistré « Auth required » au démarrage du serveur Postman. L'auteur précise que son rapport « ne prétend pas établir une exfiltration de données ». Le titre sur Hacker News affirme que l'application « tente de partager toutes les données d'API » ; le ticket lui-même ne le montre pas.",[46,499,501],{"id":500},"le-hook-qui-dicte-sa-conduite-à-lagent","Le hook qui dicte sa conduite à l'agent",[13,503,504,505,509,510,512],{},"C'est le hook de démarrage qui a modifié le comportement des agents. Le texte qu'il injecte se trouve dans le ",[17,506,508],{"href":106,"rel":507,"target":22},[21],"dépôt public du plugin",". Sur la branche principale actuelle, il commence par « You have the Postman plugin. », puis demande à l'agent, avant toute tâche d'ingénierie d'API non triviale (concevoir, implémenter, simuler, tester, surveiller, documenter ou déployer une API), de charger le skill ",[59,511,112],{}," et de le suivre. Le même fichier indique que les fichiers d'instructions du projet, comme AGENTS.md ou CLAUDE.md, ont la priorité.",[13,514,515,516,521],{},"L'auteur du ticket estime que la confiance accordée à un hook « doit être décidée par l'utilisateur dans l'agent ». Il renvoie au code de l'installeur : une fonction de ",[17,517,519],{"href":119,"rel":518,"target":22},[21],[59,520,123],{}," porte le commentaire « Approves only Postman's current hook after installation » et écrit une empreinte de confiance pour ce hook dans les réglages de Codex. L'auteur a trouvé un tel enregistrement sur son Mac, tout en notant qu'il « ne prouve pas qui a créé cet enregistrement précis ».",[46,523,525],{"id":524},"dautres-développeurs-ont-vu-la-même-chose","D'autres développeurs ont vu la même chose",[13,527,528,529,533,534,536],{},"Le 3 novembre, un deuxième utilisateur a ",[17,530,532],{"href":19,"rel":531,"target":22},[21],"publié ses journaux"," sur une version plus récente. Postman est passé de 12.31.3 à 12.35.1 au lancement, puis la même source ",[59,535,61],{}," a installé la CLI et les plugins Claude Code et Codex, en notant que Cursor avait déjà le plugin. Cet utilisateur n'a trouvé aucun enregistrement de confiance de hook dans Codex, et écrit qu'il n'a aucune preuve d'envoi de données.",[13,538,539],{},"Un autre commentateur a trouvé des entrées Postman dans le fichier de réglages de GitHub Copilot, et indique que l'option de désinstallation de Postman ne les a pas retirées de Copilot.",[46,541,543],{"id":542},"la-réponse-de-postman","La réponse de Postman",[13,545,546,547,550,551,554],{},"Une réponse publiée sur le ticket le 3 novembre à 23 h 36 UTC, rédigée au nom de l'entreprise, explique que Postman intègre la CLI et les plugins d'agents à l'application desktop « parce que beaucoup d'utilisateurs avaient du mal à les installer et à les brancher séparément ». Elle ajoute que c'est indiqué sur la page de téléchargement et dans le parcours de mise à jour, que chaque composant peut être désinstallé depuis l'application, et que Postman examine le comportement d'approbation du hook et d'instructions au démarrage. ",[17,548,154],{"href":152,"rel":549,"target":22},[21]," relève que GitHub n'identifie pas le compte auteur comme membre de Postman. La déclaration envoyée par Sarabmeet Kallar à ",[17,552,43],{"href":41,"rel":553,"target":22},[21]," via l'agence de presse de Postman donne la même explication.",[13,556,557,558,562,563,567],{},"La ",[17,559,561],{"href":165,"rel":560,"target":22},[21],"page de téléchargement de Postman"," indique désormais « The Postman app includes Postman CLI & Postman plugins ». Un commentateur du ticket a partagé une ",[17,564,566],{"href":171,"rel":565,"target":22},[21],"copie de la Wayback Machine"," de la page datée du 26 octobre, et affirme que cette phrase n'y figurait pas.",[46,569,571],{"id":570},"ce-quil-faut-vérifier-sur-sa-machine","Ce qu'il faut vérifier sur sa machine",[13,573,574],{},"Si Postman desktop est installé et que vous utilisez un agent de code, les fichiers cités dans le ticket sont les bons endroits où regarder :",[72,576,577,591,600,605],{},[75,578,579,581,582,584,585,587,588,590],{},[59,580,188],{}," : une marketplace ",[59,583,192],{},", un plugin ",[59,586,196],{}," et une éventuelle entrée ",[59,589,200],{}," associée ;",[75,592,593,471,595,597,598,488],{},[59,594,206],{},[59,596,209],{}," : ",[59,599,213],{},[75,601,602,604],{},[59,603,218],{}," : une marketplace ou un plugin Postman ;",[75,606,607,609],{},[59,608,224],{}," : la CLI.",[13,611,612],{},"Des commentateurs indiquent le menu Help > Postman CLI and Plugins de l'application pour désinstaller le plugin d'agent, avec la réserve citée plus haut pour Copilot.",[46,614,616],{"id":615},"pourquoi-cest-important","Pourquoi c'est important",[13,618,619],{},"Les agents de code lisent désormais des instructions permanentes depuis des plugins, des hooks et des serveurs MCP. Celui qui écrit ces fichiers oriente ce que fait l'agent à la tâche suivante. Ce ticket montre une application qui les écrit pour des agents qui ne lui appartiennent pas, lors d'une mise à jour que l'utilisateur n'a pas configurée. Postman propose un opt-in plus clair. L'auteur du ticket demande davantage : plus d'installation automatique pour les utilisateurs existants, et plus d'installeur qui approuve son propre hook.",{"title":237,"searchDepth":238,"depth":238,"links":621},[622,623,624,625,626,627],{"id":456,"depth":238,"text":457},{"id":500,"depth":238,"text":501},{"id":524,"depth":238,"text":525},{"id":542,"depth":238,"text":543},{"id":570,"depth":238,"text":571},{"id":615,"depth":238,"text":616},"Un ticket GitHub montre Postman desktop en train d'ajouter ses plugins, un hook de démarrage, un serveur MCP distant et une CLI aux agents de code des développeurs, via une mise à jour automatique. Postman dit qu'il rendra l'opt-in plus clair pour les utilisateurs existants.",{},"\u002Ffr\u002Fnews\u002Fpostman-desktop-installe-plugins-claude-code-codex",{"title":429,"description":628},"Postman desktop a ajouté des plugins, un hook de démarrage et un serveur MCP à Claude Code et Codex sans demander, selon un ticket GitHub. Postman promet un opt-in plus clair.","Postman a installé ses plugins dans Claude Code et Codex","fr\u002Fnews\u002Fpostman-desktop-installe-plugins-claude-code-codex",[192,259,260,636,637],"agents-de-code","securite","h-Kkov2xfVpz0pnJJRDSvSDchDJzr1wwnbjP2aGJRYo"]