15 malicious JetBrains plugins silently exfiltrated developers' OpenAI, DeepSeek and SiliconFlow API keys

Security firm Aikido Security discovered 15 malicious plugins on the JetBrains Marketplace that posed as AI coding assistants offering chat, commit messages, code review, bug finding and unit tests. Each functioned as advertised, but when a developer entered an AI provider API key into the plugin settings, it was silently forwarded over plain HTTP to an attacker-controlled server. Stolen keys covered OpenAI, DeepSeek and SiliconFlow. The two most-downloaded plugins, DeepSeek AI Assist and CodeGPT AI Assistant, reported over 25,000 downloads each, though Aikido noted counts can be inflated. The campaign ran from late October 2025 through June 2026.

What this means for youIf you use AI coding assistants in JetBrains IDEs, uninstall unfamiliar plugins and rotate any OpenAI, DeepSeek, or SiliconFlow keys you entered into them. At work, teams should audit plugin installs and restrict where API keys are stored.