postman has been malware since the day they added accounts many years ago. luckily only low skill cli fearing developers mostly gravitated to it, esp anytime in the past decade