Breaking

15 Malicious JetBrains Plugins Found Stealing AI API Keys

June 17, 2026 at 05:47 EDT

Security
Software Dev & Coding

Fifteen JetBrains IDE plugins were found stealing developers' AI provider API keys, while in a separate case two Chrome ad-blocker extensions were caught intercepting AI chatbot conversations, according to back-to-back findings by security researchers. Both cases illustrate how the spread of AI tools has turned API keys and conversation data themselves into fresh targets.

June 16, 2026 · Supply Chain Threat Report

Malicious JetBrains Plugins Caught Stealing Developers' AI API Keys

At least 15 plugins posing as AI coding assistants quietly exfiltrated OpenAI, DeepSeek and SiliconFlow keys — racking up roughly 70,000 installs before discovery.

15+

malicious plugins identified

~70K

total installs across 7 vendor accounts

months live, late Oct 2025 → Jun 2026

Most-installed offenders, by download count

~27,727

~25,571

DeepSeek AI Assist
ord.cp.code.ai.kit

CodeGPT AI Assistant
com.my.code.tools

How the theft worked

1 · LOOKS LEGIT

Plugin works normally as an AI assistant or Git tool

→

2 · DETECTS KEY

save() handler spots keys starting sk-, 51 chars long

→

3 · EXFILTRATES

Sent instantly to a plaintext HTTP C2 server

Why stolen keys matter: "LLMjacking"

AI API keys unlock paid services — attackers resell them or run massive model calls, leaving victims with huge bills. Some plugins even faked a paid tier, "selling" replacement keys for a small donation.

HIGH-PRIVILEGE TARGET

IDE plugins run outside the sandbox with direct access to source code and credentials.

BEYOND THE IDE

Two Chrome "ad blockers" were caught harvesting ChatGPT, Claude and Gemini conversations.

THE GAP

Manual marketplace review keeps missing malicious logic hidden inside otherwise functional code — and even badge-bearing official store extensions have been compromised.

WHAT TO DO NOW

Remove the malicious plugins immediately, verify the providers of everything installed, and rotate all AI API keys.

Continue reading

The rest of this article is for AI News Blitz readers. Choose an option below to keep reading.