#malicious-plugins

Fifteen Rogue JetBrains Plugins Posed as DeepSeek Assistants to Siphon AI Keys

A coordinated campaign on the JetBrains Marketplace dressed up credential stealers as LLM-powered coding helpers. The payload? Your provider keys.