Malicious AI Coding Plugins Hit JetBrains Marketplace, Stealing API Keys From Developers

Дата публикации: 17-06-2026 20:57:49

A coordinated malware campaign on the JetBrains Marketplace is turning trusted developer tools into a credential theft pipeline, according to new research from Aikido Security. Researchers identified 15 malicious JetBrains plugins posing as AI coding assistants for DeepSeek and other large language models. The plugins advertise common developer features such as chat, code review, commit message generation, bug detection, and unit test creation. The catch: when users enter an API key for...

Схожие новости

#	Наименование новости	Тональность	Информативность	Дата публикации
1	Malicious GitHub Repositories Could Trick AI Coding Agents Into Running Hidden Malware, Researchers Warn	0	7	28-06-2026
2	AI Agent Carries Out Ransomware Attack in Possible Cybercrime First	0	8	07-07-2026
3	OpenAI Expands GPT-5.5-Cyber as AI Pushes Vulnerability Patching Into a New Era	5	7	24-06-2026
4	AI makes it easier to code websites — including ones that scam consumers	0	7	23-02-2026
5	Russian Hackers Bypass Signal and WhatsApp Encryption by Targeting Backup Keys	0	8	29-06-2026
6	Linux Foundation & Others Launch "Akrites" To Defend Open-Source Software From AI-Enabled Exploits	0	7	25-06-2026
7	DragonForce Ransomware Is Hiding in Microsoft Teams Traffic	0	7	17-06-2026
8	150 тысяч программистов едва избежали кибератаки через плагины среды разработки Microsoft VS Code, написанные их нерадивыми коллегами	-2	8	16-10-2025
9	Рекомендации по использованию AI при разработке открытого кода	0	7	24-06-2026
10	macOS clipboard app Maccy has a fake out there stealing passwords	-2	7	03-07-2026

Классификация: Пресс-релизы. Схожих патентов: 0. Схожих новостей: 10. Тональность: -2. Информативность: 8. Источник: www.enterprisesecuritytech.com.