JetBrains
Disclosed Jun 16, 20263 months agoUnverified
15 malicious AI assistant plugins stole developers' AI API keys
Aikido Security found at least 15 JetBrains Marketplace plugins posing as AI coding assistants that sent AI provider API keys entered in their settings to an attacker server; they had been installed close to 70,000 times since October 2025.
What is known
| People affected | Not stated in the sources we have |
|---|---|
| Disclosed | Jun 16, 2026 |
| Attack | Supply chain |
| Data exposed | API keys |
| Sector | Tech · CZ |
| Status | Unverified: not yet confirmed by an official notice, a filing or the organization |
Sources
| Source | |
|---|---|
| Malicious JetBrains Marketplace plugins steal AI API keys from developersbleepingcomputer.com · News | News |
Notices filed
| Where | Filed | People |
|---|---|---|
| Researchtotal | Jun 16 |
History of this record
- 2026-09-25 · added · seed source
First seen 2026-09-25 (Research). Record counts are as reported. Not legal advice.