BREAKING
15 JetBrains Plugins Steal AI Keys
0
malicious plugins
0
vendor accounts
0
total installs
Top fake AI assistants by downloads
DeepSeek AI Assist
27727
CodeGPT AI Assistant
25571
How the key theft worked
1
Pose as AI tool
↓
2
Detect sk- key
↓
3
Exfiltrate via HTTP
↓
4
Resold / LLMjacking
Two fronts, same trust problem
JetBrains plugins
IDE
●
Steal OpenAI, DeepSeek keys
●
Run with high privileges
Chrome extensions
Browser
●
Capture ChatGPT, Claude chats
●
Even official-store badges
Remove plugins, rotate keys
AI NEWS BLITZ
Security firm Aikido found at least fifteen malicious JetBrains plugins stealing developers' AI API keys.