Fifteen JetBrains Marketplace Plugins Harvested AI Provider API Keys Across 70,000 Installs
Fifteen JetBrains Marketplace Plugins Harvested AI Provider API Keys Across 70,000 Installs is a high-severity supply chain compromise issue in Fifteen JetBrains Marketplace Plugins Harvested AI Provider , an AI agent. Affected: 15 plugins across 7 vendor accounts, including DeepSeek AI Assist and CodeGPT AI Assistant (published Oct 2025 through 10 Jun 2026).
Is Fifteen JetBrains Marketplace Plugins Harvested AI Provider running on your developers' machines? Anomity finds every device with this AI agent installed, shows the version, and can block it by policy. Detect this across your developers' devices with Anomity →
Key facts
- ID
fifteen-jetbrains-marketplace-plugins-harvested-ai-provider-api-keys- Severity
- high
- Attack type
- Supply chain compromise, Credential theft
- Component
- Fifteen JetBrains Marketplace Plugins Harvested AI Provider · AI agent
- Known exploited
- No known exploitation
- Published
- Last verified
What is this vulnerability?
Aikido Security found a coordinated campaign of at least 15 JetBrains Marketplace plugins across seven vendor accounts, posing as AI coding assistants, code-review tools and Git utilities, that shipped the OpenAI, DeepSeek and SiliconFlow API keys a user typed into plugin settings to a hardcoded server the moment Apply was clicked. The plugins did exactly what they advertised, so nothing looked wrong. The two largest were DeepSeek AI Assist at 27,727 installs and CodeGPT AI Assistant at 25,571, roughly 70,000 across the campaign; the earliest was published in October 2025 and new ones were still appearing on 10 June 2026. Each plugin also sold a donation tier that handed paying users a working API key, which appears to be a key taken from a free user.
Affected versions
| Affected | Fixed in |
|---|---|
15 plugins across 7 vendor accounts, including DeepSeek AI Assist and CodeGPT AI Assistant (published Oct 2025 through 10 Jun 2026) | No fixed version listed |
Am I affected by this vulnerability?
You are affected if you run 15 plugins across 7 vendor accounts, including DeepSeek AI Assist and CodeGPT AI Assistant (published Oct 2025 through 10 Jun 2026).
How do I fix it?
Rotate every OpenAI, DeepSeek and SiliconFlow key ever pasted into a JetBrains plugin settings pane, not only the ones on the published list: the campaign ran eight months across seven accounts. Then address the pattern rather than the list. An IDE plugin that asks for a provider API key is asking for a credential it can exfiltrate on a button press, so issue agents a gateway key you can revoke centrally instead of letting developers hand personal provider keys to marketplace plugins.
How do I find every machine running Fifteen JetBrains Marketplace Plugins Harvested AI Provider ?
Anomity inventories the AI agents, MCP servers, IDE extensions and skills on each developer device, so you can see which machines run Fifteen JetBrains Marketplace Plugins Harvested AI Provider and which version, then enforce a policy on it.