{
  "entry": {
    "kind": "vuln",
    "slug": "fifteen-jetbrains-marketplace-plugins-harvested-ai-provider-api-keys",
    "name": "fifteen-jetbrains-marketplace-plugins-harvested-ai-provider-api-keys",
    "vendor": "Fifteen JetBrains Marketplace Plugins Harvested AI Provider ",
    "description": "Aikido Security found a coordinated campaign of at least 15 JetBrains Marketplace plugins across seven vendor accounts, posing as AI coding assistants, code-review tools and Git utilities, that shipped the OpenAI, DeepSeek and SiliconFlow API keys a user typed into plugin settings to a hardcoded server the moment Apply was clicked. The plugins did exactly what they advertised, so nothing looked wrong. The two largest were DeepSeek AI Assist at 27,727 installs and CodeGPT AI Assistant at 25,571, roughly 70,000 across the campaign; the earliest was published in October 2025 and new ones were still appearing on 10 June 2026. Each plugin also sold a donation tier that handed paying users a working API key, which appears to be a key taken from a free user.",
    "website": "https://www.bleepingcomputer.com/news/security/malicious-jetbrains-marketplace-plugins-steal-ai-api-keys-from-developers/",
    "repository": null,
    "documentationUrl": null,
    "license": null,
    "version": null,
    "trustLevel": "advisory",
    "capabilities": [],
    "packaging": null,
    "configFiles": null,
    "category": "agent",
    "updatedAt": "2026-06-16",
    "risk": {
      "score": 75,
      "band": "high",
      "signals": [],
      "dangerousCombos": []
    },
    "dangerousCombos": [],
    "vuln": {
      "id": "fifteen-jetbrains-marketplace-plugins-harvested-ai-provider-api-keys",
      "aliases": [
        "ti-083"
      ],
      "title": "Fifteen JetBrains Marketplace Plugins Harvested AI Provider API Keys Across 70,000 Installs",
      "summary": "Aikido Security found a coordinated campaign of at least 15 JetBrains Marketplace plugins across seven vendor accounts, posing as AI coding assistants, code-review tools and Git utilities, that shipped the OpenAI, DeepSeek and SiliconFlow API keys a user typed into plugin settings to a hardcoded server the moment Apply was clicked. The plugins did exactly what they advertised, so nothing looked wrong. The two largest were DeepSeek AI Assist at 27,727 installs and CodeGPT AI Assistant at 25,571, roughly 70,000 across the campaign; the earliest was published in October 2025 and new ones were still appearing on 10 June 2026. Each plugin also sold a donation tier that handed paying users a working API key, which appears to be a key taken from a free user.",
      "severity": "high",
      "cvss": {
        "score": null,
        "vector": null,
        "version": null
      },
      "cwe": [],
      "attackType": [
        "Supply chain compromise",
        "Credential theft"
      ],
      "componentType": "agent",
      "component": {
        "name": "Fifteen JetBrains Marketplace Plugins Harvested AI Provider ",
        "vendor": null,
        "package": null,
        "ecosystem": null,
        "catalogSlug": null
      },
      "affected": [
        {
          "range": "15 plugins across 7 vendor accounts, including DeepSeek AI Assist and CodeGPT AI Assistant (published Oct 2025 through 10 Jun 2026)",
          "fixed": null
        }
      ],
      "exploited": false,
      "exploitPublic": false,
      "publishedAt": "2026-06-16",
      "modifiedAt": "2026-06-16",
      "lastVerified": "2026-11-01",
      "references": [
        {
          "type": "article",
          "url": "https://www.bleepingcomputer.com/news/security/malicious-jetbrains-marketplace-plugins-steal-ai-api-keys-from-developers/"
        }
      ],
      "mitigation": "Rotate every OpenAI, DeepSeek and SiliconFlow key ever pasted into a JetBrains plugin settings pane, not only the ones on the published list: the campaign ran eight months across seven accounts. Then address the pattern rather than the list. An IDE plugin that asks for a provider API key is asking for a credential it can exfiltrate on a button press, so issue agents a gateway key you can revoke centrally instead of letting developers hand personal provider keys to marketplace plugins.",
      "detectedByAnomity": true
    }
  }
}