Supply Chain Attacks on AI-Integrated Developer Environments

This technical report outlines the recent coordinated supply chain attacks targeting AI-integrated developer environments, particularly focusing on IDE plugin ecosystems. It describes three significant campaigns that occurred between October 2025 and June 2026, highlighting the vulnerabilities in the plugin marketplaces such as JetBrains and Visual Studio Code. The report details how malicious plugins were able to harvest API keys and other sensitive credentials by exploiting the trust model of these marketplaces. It explains the mechanisms used by attackers, including credential-harvesting techniques and self-propagating malware, which have become increasingly sophisticated. The report also emphasizes the need for organizations to implement strict security measures, such as auditing installed plugins and managing API keys securely. It presents a comprehensive analysis of the security landscape surrounding AI development tools and the implications of these attacks for developers and organizations relying on such technologies.