Aikido Security Discovers Malicious JetBrains Plugins Stealing AI API Keys

Aikido Security is a cybersecurity company that identified a coordinated malware campaign on the JetBrains Marketplace involving 15 malicious plugins that exfiltrate AI provider API keys. The plugins pose as AI coding assistants but covertly send API keys to an attacker-controlled server.