A coordinated malware campaign has infiltrated the JetBrains Marketplace with 15 malicious plugins disguised as AI coding assistants. These plugins, which claim to leverage DeepSeek and other large language models for development tasks, are designed to steal AI provider API keys from developers. The threat extends to Chrome extensions that capture chatbot conversations, representing a significant
Cybersecurity researchers have flagged a "coordinated malware campaign" on the JetBrains Marketplace that has published no less than 15 malicious plugins capable of exfiltrating artificial intelligence (AI) provider keys. "Every plugin poses as an AI coding assistant built on DeepSeek and other large language models, offering chat, commit messages, code review, bug finding, and unit tests,"
Originally published at thehackernews.com
60-minute technical evaluation, no obligation. We'll map the ideas in this article to your environment.
