Skip to content
Multiple JetBrains IDE plugins caught stealing AI keys
aikido.dev | blog | #ai-security | #supply-chain | #malware | #credential-theft | #jetbrains | #aikido | #supply-chain-security | #marketplace | #data-exfiltration | #api-keys | #ide-plugins | #exfiltration | #api-key-theft
Summary
Aikido found at least 15 JetBrains Marketplace plugins from seven vendor accounts, installed nearly 70,000 times, exfiltrating users' AI API keys over plain HTTP the moment they are saved.
- Published
- Collected