PulseAugur
中
实时 16:59:18
English(EN) 🚨Cybersecurity Alert🚨 Beware of 15 malicious JetBrains plugins! They've been stealthily stealing AI API keys since October 2025! Even popular chatbot conversati

JetBrains Marketplace上的恶意AI插件窃取开发者API密钥

作者 PulseAugur 编辑部 · [4 个来源] ·

在JetBrains Marketplace上发现了恶意的AI编码助手插件，对开发者构成了重大的安全风险。这些插件约有15个，下载量接近7万次，旨在窃取DeepSeek和OpenAI等热门AI服务的API密钥。这些插件至少自2025年10月以来一直活跃，其中一些还包含一个记录聊天机器人对话的Chrome扩展程序，进一步危及用户数据。 AI

影响 受损的API密钥可能导致未经授权访问AI服务，可能扰乱开发工作流程并暴露敏感数据。

排序理由 该集群描述了通过开发者工具市场分发的恶意插件，这是一个与软件工具相关的安全问题。

在 Mastodon — fosstodon.org 阅读 →

AI 生成摘要 · Google Gemini · 来自 4 个来源。 我们如何撰写摘要 →

JetBrains Marketplace上的恶意AI插件窃取开发者API密钥

本文如何被排名

Signal score
0 / 100
Composite score across the factors below. Higher = stronger signal that this story matters right now.
Newsworthiness bucket
Tool
该集群描述了通过开发者工具市场分发的恶意插件，这是一个与软件工具相关的安全问题。
Source corroboration
4 independent sources
Strong cross-source corroboration — multiple independent publishers covered this within the clustering window.
Topics
product, safety
Editorial topic classification. Feeds into how the story surfaces on /topic/<slug> hub pages and into the per-entity coverage mix.
AI-industry relevance
High
Clearly on-topic for AI-industry coverage.
Story freshness
133 days old
Aged out of breaking-news scoring windows; ranking reflects the durable signal from the full source set.

完整方法见我们的编辑标准。

报道来源 [4]

  1. Mastodon — sigmoid.social TIER_1 English(EN) · [email protected] ·

    黑客在 JetBrains Marketplace 上使用虚假 AI 编码助手窃取 DeepSeek、OpenAI 等开发者的 API 密钥 - 15 个恶意插件，近

    Hackers are using fake AI coding assistants on the # JetBrains Marketplace to steal DeepSeek, OpenAI, and other developer API keys - 15 malicious plugins, nearly 70K downloads, and fake reviews used to lure developers. Read: https:// hackread.com/malicious-jetbrai ns-plugins-stea…

    链接 hackread.com/malicious-jetbrains-plugins-…
  2. Mastodon — fosstodon.org TIER_1 English(EN) · [email protected] ·

    🚨网络安全警报🚨警惕15款恶意JetBrains插件！自2025年10月起，它们一直在秘密窃取AI API密钥！就连流行的聊天机器人对话

    🚨Cybersecurity Alert🚨 Beware of 15 malicious JetBrains plugins! They've been stealthily stealing AI API keys since October 2025! Even popular chatbot conversations aren't safe with a separate Chrome extension campaign recording them. Update your cybersecurity measures now! 🔒 # Cy…

    链接 squaredtech.co/malicious-jetbrains-plugin… squaredtech.co/malicious-jetbrains-plugin…
  3. Mastodon — mastodon.social TIER_1 English(EN) · [email protected] ·

    恶意# JetBrains Marketplace 插件窃取开发者# AI# API 密钥 https://www.bleepingcomputer.com/news/secu rity/malicious-jetbrains-marketplace

    Malicious # JetBrains Marketplace plugins steal # AI # API keys from developers https://www. bleepingcomputer.com/news/secu rity/malicious-jetbrains-marketplace-plugins-steal-ai-api-keys-from-developers/ # cybersecurity

    链接 bleepingcomputer.com/…/malicious-jetbrain…
  4. Mastodon — mastodon.social TIER_1 English(EN) · ethauvin ·

    JetBrains Marketplace 生态系统安全更新：处理恶意第三方 AI 插件 # ai # ide # intellij # intellijidea # java # jetbrains # kotlin #

    JetBrains Marketplace Ecosystem Security Update: Addressing Malicious Third-Party AI Plugins # ai # ide # intellij # intellijidea # java # jetbrains # kotlin # marketplace # plugins https:// blog.jetbrains.com/platform/20 26/06/marketplace-ecosystem-security-update-malicious-ai-p…

    链接 blog.jetbrains.com/…/marketplace-ecosyste… blog.jetbrains.com

相关实体

相关话题