Toggle light / dark theme

Get the latest international news and world events from around the world.

Log in for authorized contributors

Malicious JetBrains Marketplace plugins steal AI API keys from developers

At least 15 malicious plugins found on the JetBrains Marketplace were designed to steal AI API keys from developers.

The campaign, discovered by Aikido Security, includes plugins that act as AI coding assistants, code-review tools, and Git utilities powered by popular AI services such as OpenAI, DeepSeek, and SiliconFlow.

“We detected a coordinated malware campaign on the JetBrains Marketplace,” warns Aikido.

/* */