• •Security firm Aikido identified multiple JetBrains IDE plugins designed to exfiltrate user API keys
• •Affected plugins allegedly sent environmental variables containing sensitive AI service credentials to an external server
• •It remains unclear how many total users were impacted or if the malicious code persists in updated versions of these specific plugins

Security researchers at Aikido reported that several JetBrains IDE plugins were found siphoning AI API keys from developer environments. While JetBrains provides a marketplace for third-party extensions, this incident highlights the vulnerability inherent in installing unverified code into development workflows. Investigators observed the malicious plugins transmitting sensitive configuration data to an unauthorized third-party endpoint. Whether developers can fully trust existing marketplace vetting processes remains a point of significant debate among engineers on platforms like Hacker News.