Multiple JetBrains IDE plugins caught stealing AI keys

Published

2026-06-16 00:00

Collected

2026-07-04 09:14

---
id: 2420
title: "Multiple JetBrains IDE plugins caught stealing AI keys"
source_domain: aikido.dev
source_url: "https://www.aikido.dev/blog/multiple-jetbrains-ide-plugins-caught-stealing-ai-keys"
published_at: "2026-06-16 00:00"
tags: ["ai-security", "supply-chain", "malware", "credential-theft", "jetbrains", "aikido", "supply-chain-security", "marketplace", "data-exfiltration", "api-keys", "ide-plugins", "exfiltration", "api-key-theft"]
phying_url: "https://phying.com/item/2420"
lang: en
---

# Multiple JetBrains IDE plugins caught stealing AI keys

## Summary

Aikido found at least 15 JetBrains Marketplace plugins from seven vendor accounts, installed nearly 70,000 times, exfiltrating users' AI API keys over plain HTTP the moment they are saved.

## Intelligence Metadata

- **Sources:** aikido.dev
- **Published:** 2026-06-16 00:00
- **Original:** https://www.aikido.dev/blog/multiple-jetbrains-ide-plugins-caught-stealing-ai-keys
- **Phying News:** https://phying.com/item/2420