Malicious JetBrains plugins steal AI API keys

A coordinated malware campaign has been targeting software developers through the JetBrains Marketplace, using at least 15 malicious plugins disguised as AI coding assistants to steal authentication keys. The campaign, first identified by cybersecurity researchers, has been active since late October 2025, with new plugins released as recently as June 10, 2026. The plugins, which have been collectively downloaded nearly 70,000 times, pose as tools built on large language models like DeepSeek, offering features such as code review and bug detection.

Researchers said the plugins function as advertised but covertly exfiltrate the API keys users enter for AI providers such as OpenAI, SiliconFlow, or DeepSeek. The keys are transmitted in plaintext over an unencrypted HTTP connection to a server controlled by the attackers. Two of the most downloaded plugins, CodeGPT AI Assistant and DeepSeek AI Assist, each reportedly have more than 25,000 downloads, though researchers noted the counts may have been inflated through fake reviews designed to appear legitimate.

The operation includes a monetized secondary tier. Users who pay a small fee through an in-app donation prompt receive a...