Application SecurityBleeping Computer
8.5 — CRITICAL
Malicious JetBrains Marketplace plugins steal AI API keys from developers
At least 15 malicious plugins found on the JetBrains Marketplace were designed to steal AI API keys from developers. [...]
🤖 AI BriefingAuto-generated threat analysis
🔍Threat Overview
A coordinated malware campaign on the JetBrains Marketplace has stolen AI API keys from developers, with at least 15 malicious plugins installed over 70,000 times.
⚙️Technical Details
Affected Systems
JetBrains Marketplace
Attack Vectors
Clicking 'Apply' after entering an API keyDownloading and installing the malicious plugins
💥Impact Assessment
Severity: high
Who Is at Risk
Developers using JetBrains Marketplace plugins with AI coding assistants, code-review tools, and Git utilities
🛡️Recommended Actions
1Monitor JetBrains Marketplace for new plugin releases
2Regularly review plugin settings for suspicious activity
3Implement additional security measures to protect API keys
📦Affected Products
JetBrains Marketplace plugins with AI coding assistants, code-review tools, and Git utilities
Read the full article
This is a curated summary. The complete article is available at Bleeping Computer.