GoKawiilAt least 15 malicious plugins found on the JetBrains Marketplace were designed to steal AI API keys from developers.
The campaign, discovered by Aikido Security, includes plugins that act as AI coding assistants, code-review tools, and Git utilities powered by popular AI services such as OpenAI, DeepSeek, and SiliconFlow.
"We detected a coordinated malware campaign on the JetBrains Marketplace," warns Aikido.
"At least 15 IDE plugins, published under seven vendor accounts, share the same hidden behavior. Each one exfiltrates the AI provider API key that you stored into its settings, and together they have been installed close to 70,000 times."
According to Aikido, the malicious plugins were first published in October 2025, with new plugins continuing to be published as recently as June 10, 2026.
The researchers say the plugins function as advertised, but secretly transmit AI API keys entered by users into the plugin settings back to the attackers.
According to the report, the theft occurs when a user clicks "Apply" after entering an API key, causing the credential to be sent to a hardcoded server at 39.107.60[.]51 over HTTP at this URL:
hxxp://39.107.60[.]51/api/software/key
The researchers found that all 15 plugins share similar code that were submitted as different Marketplace plugins.
Aikido also discovered functionality that allows the remote server to provide AI API keys to paid users.
... continue reading