PulseAugur
EN
LIVE 20:06:18

Malicious AI plugins on JetBrains Marketplace steal developer API keys

By PulseAugur Editorial · [4 sources] ·

Malicious AI coding assistant plugins have been discovered on the JetBrains Marketplace, posing a significant security risk to developers. These plugins, numbering around 15 and with nearly 70,000 downloads, are designed to steal API keys from popular AI services like DeepSeek and OpenAI. The plugins have been active since at least October 2025, and some also include a Chrome extension that records chatbot conversations, further compromising user data. AI

IMPACT Compromised API keys could lead to unauthorized access to AI services, potentially disrupting development workflows and exposing sensitive data.

RANK_REASON The cluster describes malicious plugins distributed through a developer tool marketplace, which is a security issue related to software tools.

Read on Mastodon — fosstodon.org →

AI-generated summary · Google Gemini · from 4 sources. How we write summaries →

Malicious AI plugins on JetBrains Marketplace steal developer API keys

COVERAGE [4]

  1. Mastodon — sigmoid.social TIER_1 English(EN) · [email protected] ·

    Hackers are using fake AI coding assistants on the # JetBrains Marketplace to steal DeepSeek, OpenAI, and other developer API keys - 15 malicious plugins, nearl

    Hackers are using fake AI coding assistants on the # JetBrains Marketplace to steal DeepSeek, OpenAI, and other developer API keys - 15 malicious plugins, nearly 70K downloads, and fake reviews used to lure developers. Read: https:// hackread.com/malicious-jetbrai ns-plugins-stea…

    LINKS hackread.com/malicious-jetbrains-plugins-…
  2. Mastodon — fosstodon.org TIER_1 English(EN) · [email protected] ·

    🚨Cybersecurity Alert🚨 Beware of 15 malicious JetBrains plugins! They've been stealthily stealing AI API keys since October 2025! Even popular chatbot conversati

    🚨Cybersecurity Alert🚨 Beware of 15 malicious JetBrains plugins! They've been stealthily stealing AI API keys since October 2025! Even popular chatbot conversations aren't safe with a separate Chrome extension campaign recording them. Update your cybersecurity measures now! 🔒 # Cy…

    LINKS squaredtech.co/malicious-jetbrains-plugin… squaredtech.co/malicious-jetbrains-plugin…
  3. Mastodon — mastodon.social TIER_1 English(EN) · [email protected] ·

    Malicious # JetBrains Marketplace plugins steal # AI # API keys from developers https://www. bleepingcomputer.com/news/secu rity/malicious-jetbrains-marketplace

    Malicious # JetBrains Marketplace plugins steal # AI # API keys from developers https://www. bleepingcomputer.com/news/secu rity/malicious-jetbrains-marketplace-plugins-steal-ai-api-keys-from-developers/ # cybersecurity

    LINKS bleepingcomputer.com/…/malicious-jetbrain…
  4. Mastodon — mastodon.social TIER_1 English(EN) · ethauvin ·

    JetBrains Marketplace Ecosystem Security Update: Addressing Malicious Third-Party AI Plugins # ai # ide # intellij # intellijidea # java # jetbrains # kotlin #

    JetBrains Marketplace Ecosystem Security Update: Addressing Malicious Third-Party AI Plugins # ai # ide # intellij # intellijidea # java # jetbrains # kotlin # marketplace # plugins https:// blog.jetbrains.com/platform/20 26/06/marketplace-ecosystem-security-update-malicious-ai-p…

    LINKS blog.jetbrains.com/…/marketplace-ecosyste… blog.jetbrains.com

RELATED ENTITIES

RELATED TOPICS