TLDR Tech / InfoSec
Malicious JetBrains Marketplace Plugins Steal AI API Keys From Developers
Aikido Security detected a new malware campaign that uses plugins for AI coding assistants advertised on the JetBrains Marketplace to steal credentials. The plugins prompt the user to enter their API key when they first download and configure the plugin, and the key is transmitted to a remote server immediately. The plugins also offer a paid tier that provides users with an API key to use. It is unclear where these keys come from, but the researchers hypothesize that they belong to free-tier users.
Read the full story