Multiple JetBrains IDE plugins caught stealing AI keys (opens in new tab)

Covered by 11 sources including BleepingComputer, SecurityWeekDiscussed on Hacker News

A coordinated campaign of at least 15 JetBrains IDE plugins, published under seven vendor accounts, exfiltrates the AI provider API key you paste into their settings. Category: Vulnerabilities & Threats

Read the original article

Sign in to keep reading the full article.

Sign Up Log In

Covered in 11 articles

BleepingComputer·

Malicious JetBrains Marketplace plugins steal AI API keys from developers

SecurityWeek·

In Other News: Apple Patches Beats Eavesdropping Flaw, DOT Closes Delta CrowdStrike Probe, AWS Continuum

Comments on:·

15 Malicious JetBrains Plugins Caught Stealing DeepSeek, OpenAI API Keys

View all 11 ›