NewsPublished 16 Jun 2026

Malicious JetBrains Marketplace plugins steal AI API keys from developers

Source Bleeping Computer

Description

At least 15 malicious plugins found on the JetBrains Marketplace were designed to steal AI API keys from developers. [...]

Impact

The malicious plugins compromise developer AI API keys, potentially allowing attackers to misuse these credentials for unauthorized AI service access. This can lead to unauthorized usage charges, loss of control over API keys, and potential abuse of AI services under the victim's account. The plugins' legitimate functionality may reduce suspicion, increasing the risk of prolonged credential theft. The redistribution of stolen keys to paid users also indicates a fraudulent monetization scheme. There is no evidence of broader system compromise beyond API key theft.

Defensive guidance

Until official action is taken, users should avoid installing or using plugins from untrusted or unknown vendors on the JetBrains Marketplace. Developers should review and revoke any AI API keys that may have been entered into these plugins. Monitoring for unusual API usage and rotating API keys regularly is recommended. JetBrains users should await official communication and updates from JetBrains regarding removal or blocking of malicious plugins.

References

bleepingcomputer.com/news/security/malicious-jetbrains-marketplace-plugins-steal-ai-api-keys-from-developers/ (opens in a new tab)

Community reviews

Loading reviews…

Description

AI analysisMachine-generated, updated 16 Jun 2026, 22:00 UTC

References

Community reviews