JetBrains plug-ins steal API keys from AI services (opens in new tab)

Security firm Aikido Security has discovered malicious plug-ins in the JetBrains Marketplace that intercept API keys from AI services. According to the researchers, at least fifteen extensions are involved, which have been installed nearly 70,000 times in total. The plug-ins presented themselves as AI assistants for developers. They offered feature...