0x

guest@0xbase ~$ read-only mode. Posting requires EU location.

← back to intelligence feed

Fifteen JetBrains Marketplace Plugins Steal API Keys (infosecurity-magazine.com)

· 40d ago · Report · Spotlight this ·
0xBASE INTEL BRIEF
  • 15 malicious plugins on JetBrains Marketplace
  • Exfiltrate API keys on entry
  • ~70,000 installs since October 2025

"Aikido Security discovered 15 malicious IDE plugins on the JetBrains Marketplace that exfiltrate AI API keys. The plugins, installed around 70,000 times since October 2025, pose as AI coding assistants and send entered keys to an attacker-controlled server immediately. The campaign may be reselling stolen keys through a paid plugin tier."

#JetBrains plugin malware #API key theft #software supply chain attack
Read article on infosecurity-magazine.com → More from infosecurity-magazine.com

Discussion Matrix

0 segments

no comments yet.