Fake AI Coding Tools Quietly Drained 70,000 Developers' API Keys
Fifteen malicious plugins posing as AI coding assistants on the JetBrains Marketplace spent eight months silently siphoning OpenAI, DeepSeek, and SiliconFlow API keys from tens of thousands of developers and shipping them to an attacker-controlled server in Beijing.
Source: StepSecurity
Read more: CyberSecBrief










