Malicious AI Coding Plugins Hit JetBrains Marketplace, Stealing API Keys From Developers

Дата публикации: 17-06-2026 20:57:49

A coordinated malware campaign on the JetBrains Marketplace is turning trusted developer tools into a credential theft pipeline, according to new research from Aikido Security. Researchers identified 15 malicious JetBrains plugins posing as AI coding assistants for DeepSeek and other large language models. The plugins advertise common developer features such as chat, code review, commit message generation, bug detection, and unit test creation. The catch: when users enter an API key for...

Схожие новости

#	Наименование новости	Тональность	Информативность	Дата публикации
1	OpenCode hack exposes API keys amid AI distillation attacks	0	9.81	19-10-2026
2	A Sneaky Hacking Tool Targeting AI Infrastructure Is Lurking in Victims’ Blind Spots	0	7.4	21-07-2026
3	Malicious GitHub Repositories Could Trick AI Coding Agents Into Running Hidden Malware, Researchers Warn	0	7	28-06-2026
4	AI Agent Carries Out Ransomware Attack in Possible Cybercrime First	0	8	07-07-2026
5	OpenAI Expands GPT-5.5-Cyber as AI Pushes Vulnerability Patching Into a New Era	5	7	24-06-2026
6	From single pull requests to full software packages: Detecting malicious code at scale	0	8.8	02-06-2026
7	Postřehy z bezpečnosti: malware klame analytické AI nástroje	-2	7	28-06-2026
8	OctLurk and SilkLurk: newly identified tailored backdoors in cyber-espionage campaign in Central Asia	0	7.89	30-07-2026
9	AI makes it easier to code websites — including ones that scam consumers	0	7	23-02-2026
10	Russian Hackers Bypass Signal and WhatsApp Encryption by Targeting Backup Keys	0	8	29-06-2026

Классификация: Пресс-релизы. Схожих патентов: 0. Схожих новостей: 10. Тональность: -2. Информативность: 8. Источник: www.enterprisesecuritytech.com.