A large-scale malware campaign has been uncovered on the JetBrains Marketplace, where at least 15 malicious IDE plugins were found stealing sensitive API keys from developers.
These plugins, downloaded over 70,000 times, were published under seven different vendor accounts and disguised as legitimate AI-powered coding assistants.
According to Aikido’s research, the malicious plugins claimed to offer useful developer features such as AI chat, code generation, bug detection, commit message creation, and unit test writing.
They appeared functional and delivered the promised features, making them difficult to detect. However, behind the scenes, they were silently harvesting users’ API keys.
Aikido researchers found that all identified plugins share a nearly identical codebase that has been slightly modified and republished under different names. To use these tools, developers must enter API keys for services such as OpenAI, DeepSeek, or SiliconFlow.
Once the user enters the API key and clicks “Apply,” the plugin immediately captures and exfiltrates the key without any warning or consent.
The malicious logic is embedded in the plugin’s settings handler, enabling instant, invisible data theft. The stolen API keys are sent via an HTTP POST request to a hardcoded command-and-control (C2) server located at 39.107.60[.]51.
The communication occurs over plaintext HTTP, exposing sensitive credentials to interception and misuse.
The plugins also include a paid tier, which raises further concerns. After users make a payment, the plugin receives a new API key from the attacker-controlled server. It begins using it instead of the user’s original key.
Aikido suggests this may indicate a resale scheme, where stolen API keys from victims are redistributed to paying users. This allows attackers to monetize both stolen credentials and paid subscriptions while shifting operational costs to unsuspecting victims.
The campaign dates back to October 2025, with new malicious plugins continuing to appear as recently as June 2026.
Aikido noted that the actual impact may be higher than reported, as download counts can be manipulated and fake positive reviews were observed on plugin listings.
Integrated Development Environments (IDEs) are increasingly targeted in supply chain attacks because they hold highly sensitive data.
These include source code, credentials, signing keys, and now AI service API keys. Plugins typically run with high privileges and are trusted by developers, making them an ideal vector for stealthy attacks.
Even with JetBrains’ manual review process, small hidden malicious functions can evade detection.
Indicators of Compromise (IOCs)
C2 Server
39.107.60[.]51Affected Plugins
org.sm.yms.toolkit) – 1,121 downloadscom.json.simple.kit) – 1,894 downloadsorg.bug.find.tools) – 1,485 downloadsorg.translate.ai.simple) – 1,317 downloadscom.yy.test.ai.simple) – 740 downloadscom.dev.ai.toolkit) – 450 downloadscom.json.view.simple) – 623 downloadscom.my.git.ai.kit) – 301 downloadsorg.check.ai.ds) – 735 downloadscom.review.tool.code) – 3,498 downloadsorg.code.assist.dev.tool) – 319 downloadscom.coder.ai.dpt) – 278 downloadscom.my.code.tools) – 25,571 downloadsord.cp.code.ai.kit) – 27,727 downloadscom.dp.git.ai.tool) – 3,931 downloadsVendor Accounts
mycode)misshewei)keteme)simpledev)skyblue)dialycode)947cb4c8-5db1-4cf0-8182-0aae7c433bb3)Note: IP addresses and domains are intentionally defanged (e.g., [.]) to prevent accidental resolution or hyperlinking. Re-fang only within controlled threat intelligence platforms such as MISP, VirusTotal, or your SIEM.
Aikido recommends that developers immediately remove any affected plugins and revoke exposed API keys. It is critical to rotate credentials and monitor for unusual API usage or billing spikes.
Security experts recommend treating IDE plugins as high-risk dependencies. Avoid entering sensitive credentials into unverified tools and rely only on trusted publishers.
Organizations should also deploy endpoint monitoring solutions and software supply chain security tools to detect malicious packages early and prevent compromise.
This campaign highlights the growing risk of developer-focused attacks and the importance of vigilance when integrating third-party tools into development environments.
CISO & Security Leaders: Your next breach may not have a face. Join ISC2’s LIVE webinar, “Ghost in the Machine” – Book Your Spot Here
Abinayahttps://cybersecuritynews.com/
Abi is a Security Editor and fellow reporter with Cyber Security News. She is covering various cyber security incidents happening in the Cyber Space.
此内容由惯性聚合(RSS阅读器)自动聚合整理，仅供阅读参考。 原文来自 — 版权归原作者所有。
