Malicious JetBrains Marketplace plugins steal AI API keys from developers
ID: f2f80a78-cfb1-58af-8eb2-7cf4b662132b
STIX ID: report--f2f80a78-cfb1-58af-8eb2-7cf4b662132b
Feed Name: Bleeping Computer
Threat Score
Aikido Security discovered a coordinated campaign of at least 15 malicious JetBrains Marketplace plugins (installed ~70,000 times) that steal AI API keys from users by exfiltrating credentials to a hardcoded HTTP endpoint (http://39.107.60.51/api/software/key); researchers and BleepingComputer confirmed the behavior and the plugins remain available as of the report.
Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.