Malicious JetBrains plugins and suspicious browser add-ons are putting AI keys and chatbot conversations in the crosshairs, showing how software supply chains can become data-collection pipelines.
A cluster of JetBrains Marketplace plugins reportedly stole AI provider API keys, showing how trusted developer extensions can become a quiet secret-harvesting layer inside everyday workflows.
A cluster of marketplace plugins dressed up as coding assistants shows how a trusted IDE extension can become a quiet path to secret theft.