Breachesby GlyphJetBrains
Disclosed Jun 16, 2026Unverified
15 malicious AI assistant plugins stole developers' AI API keys
Aikido Security found at least 15 JetBrains Marketplace plugins posing as AI coding assistants that sent AI provider API keys entered in their settings to an attacker server; they had been installed close to 70,000 times since October 2025.
What is known
| People affected | Not stated in the sources we have |
|---|---|
| Disclosed | Jun 16, 2026 |
| Attack | Supply chain |
| Data exposed | API keys |
| Sector | Tech · CZ |
| Status | Unverified: not yet confirmed by an official notice, a filing or the organization |
Sources
Notices filed
History of this record
First recordedby seedSource
First seen 2026-09-25 (Research). Record counts are as reported. Not legal advice.