Malicious Plugins Exfiltrate AI API Keys

Beware of malicious AI plugins masquerading as coding assistants on the JetBrains Marketplace - they might just steal your AI API keys. These 15 sneaky plugins, active since October 2025, cleverly exfiltrate API keys to attacker-controlled servers, all while functioning as promised.

https://osintsights.com/malicious-plugins-exfiltrate-ai-api-keys?utm_source=mastodon&utm_medium=social

#MaliciousPlugins #AiApiKeys #JetbrainsMarketplace #SupplyChain #EmergingThreats

Malicious Plugins Exfiltrate AI API Keys on JetBrains Marketplace

Beware of malicious AI plugins on the JetBrains Marketplace that masquerade as helpful coding assistants but secretly steal your AI API keys. Over 70,000 installations have been recorded from at least 15 compromised plugins that have surprisingly evaded the marketplace's security checks.

https://osintsights.com/malicious-plugins-exfiltrate-ai-api-keys-on-jetbrains-marketplace?utm_source=mastodon&utm_medium=social

#MaliciousPlugins #AiApiKeys #JetbrainsMarketplace #AikidoSecurity #SupplyChain

Malicious JetBrains plugins steal AI API keys

Beware of malicious JetBrains plugins masquerading as helpful tools - at least 15 have been detected stealing AI API keys from unsuspecting developers, with a staggering 70,000 installations. These fake plugins have been secretly siphoning off sensitive information since October 2025.

https://osintsights.com/malicious-jetbrains-plugins-steal-ai-api-keys?utm_source=mastodon&utm_medium=social

#MalwareOperations #Jetbrains #AiApiKeys #IdePlugins #EmergingThreats