Malicious JetBrains Plugins Steal AI API Keys as Chrome Extensions Capture Chatbot Chats

Malicious JetBrains Marketplace plugins steal AI API keys from developers

15 JetBrains Marketplace plugins steal AI API keys (OpenAI, DeepSeek, SiliconFlow) from 70K+ users via unencrypted HTTP. Developers must immediately rotate credentials; credential theft enables unauthorized usage, unexpected billing, and account compromise.