JetBrains Marketplace

Reported Context (3)

JetBrains Marketplace plugins steal developer AI keys SecurityWeek Roundup: phpBB Flaw, WordPress Supply-Chain Attack and More
identifying a coordinated supply chain attack involving 15 malicious third-party plugins on the JetBrains Marketplace. These plugins, published under seven separate vendor accounts, masqueraded as legitimate 15 Malicious JetBrains Plugins Targeted AI API Keys Across About 70,000 Installs
Aikido Security uncovered a coordinated campaign on the JetBrains Marketplace in which at least 15 plugins posed as AI coding and development tools while secretly stealing developers’ AI provider API keys. 15 JetBrains Marketplace Plugins Found Stealing Developers’ AI API Keys

CVE (1)

Threat Actors (2)

MITRE ATT&CK (4)

Vendors (12)

Products (26)

Tools (4)

Industries (2)

Countries (1)

Note: Related entities, including threat actors, malware, CVEs, MITRE ATT&CK techniques, vendors, products, tools, countries, and industries, are shown when they appear in the same reporting. Their presence does not necessarily mean they were targeted, compromised, vulnerable, responsible for the activity, or directly involved in the incident.