Malicious AI Coding Plugins Hit JetBrains Marketplace, Stealing API Keys From Developers

Дата публикации: 17-06-2026 20:57:49

A coordinated malware campaign on the JetBrains Marketplace is turning trusted developer tools into a credential theft pipeline, according to new research from Aikido Security. Researchers identified 15 malicious JetBrains plugins posing as AI coding assistants for DeepSeek and other large language models. The plugins advertise common developer features such as chat, code review, commit message generation, bug detection, and unit test creation. The catch: when users enter an API key for...

Схожие новости

#	Наименование новости	Тональность	Информативность	Дата публикации
1	A Sneaky Hacking Tool Targeting AI Infrastructure Is Lurking in Victims’ Blind Spots	0	7.4	21-07-2026
2	Malicious GitHub Repositories Could Trick AI Coding Agents Into Running Hidden Malware, Researchers Warn	0	7	28-06-2026
3	AI Agent Carries Out Ransomware Attack in Possible Cybercrime First	0	8	07-07-2026
4	OpenAI Expands GPT-5.5-Cyber as AI Pushes Vulnerability Patching Into a New Era	5	7	24-06-2026
5	Postřehy z bezpečnosti: malware klame analytické AI nástroje	-2	7	28-06-2026
6	AI makes it easier to code websites — including ones that scam consumers	0	7	23-02-2026
7	Russian Hackers Bypass Signal and WhatsApp Encryption by Targeting Backup Keys	0	8	29-06-2026
8	Linux Foundation & Others Launch "Akrites" To Defend Open-Source Software From AI-Enabled Exploits	0	7	25-06-2026
9	DragonForce Ransomware Is Hiding in Microsoft Teams Traffic	0	7	17-06-2026
10	Researchers Uncover First Fully Agentic AI Ransomware Attack	0	8	06-07-2026

Классификация: Пресс-релизы. Схожих патентов: 0. Схожих новостей: 10. Тональность: -2. Информативность: 8. Источник: www.enterprisesecuritytech.com.