The added software is their implementation detail, not your individual concern. Presumably, you've given permissions to run the application that didn't change (it was always capable of doing this and you initially agreed) or required you to consent to new changes to run it. This is as banal as including an extra npm package that takes slightly more work to execute.