Will the JetBrains Marketplace malicious-plugin incident cause 5+ organizations to publicly disclose key compromise by end of 2026?

Bleeping Computer reports at least 15 malicious JetBrains Marketplace plugins designed to steal AI API keys from developers. This represents a supply-chain attack on a critical developer tool used by enterprises and AI companies. Resolution will check for public vendor breach/incident disclosures directly attributing key theft to this plugin campaign.

Resolution Criteria

Public disclosure by affected organizations, vendor statements, or CISA/ICS-CERT advisories documenting exploitation of the malicious plugins and subsequent API key compromise. Reputable cybersecurity news outlets (Bleeping Computer, Ars Technica, KrebsOnSecurity, vendor advisories) confirming at least 5 verified cases.