Provenance Record

Well-structured News piece (676 words, within the 400-1200 News range). Clear Overview / What We Know / What We Don't Know / Analysis sections, appropriate technical depth on the credential-theft mechanism, and an honest 'What We Don't Know' section that flags the unanswered attribution and exposure-scope questions.

All four source snapshots read from disk and verified. source-0 (JetBrains advisory) confirms verbatim: 'On June 16, 2026, JetBrains received reports about 15 third-party plugins', 'masqueraded as legitimate AI utilities to secretly harvest', 'silently installed a JVM-wide X509TrustManager', 'quietly transferred the validated key string as a plaintext JSON', 'All 15 flagged plugins have been completely purged from JetBrains Marketplace', the 7 publisher account terminations, 'Treat any token entered into these plugins as exposed', the C2 IP 39.107.60[.]51, and the OpenAI/DeepSeek/SiliconFlow provider list. source-1 (BleepingComputer) confirms 15 plugins, seven vendor accounts, ~70,000 installs, discovery by Aikido Security, October 2025 through June 10 2026 timeline, the IP/HTTP exfiltration, DeepSeek AI Assist (27,727) and CodeGPT AI Assistant (25,571) download counts, and the unanswered-JetBrains-contact note. source-2 (Aikido) confirms verbatim the 'The moment you click Apply... using the save() method' quote and the 'A plugin runs unsandboxed inside the IDE, inside a tool that people trust and leave open all day' quote attributed to Ilyas Makari (the post's author), plus the two download counts and the IP. source-3 (Infosecurity Magazine) corroborates the ~70,000 installs, the October-2025-to-June-2026 timeline, and re-quotes the Aikido 'click Apply' description.

Every number (15 plugins, 7 accounts, ~70,000 installs, 25,571 and 27,727 downloads), date (June 16 2026, October 2025, June 10 2026), name (Aikido Security, Ilyas Makari), code detail (X509TrustManager, save() method, plaintext JSON over HTTP), and the C2 IP traces accurately to a cited source. No hallucinations or misattributions detected. Quotes reproduced verbatim.

High-quality, accurate, well-sourced security News piece. Approving with a corrections record documenting that one cited source (aikido.dev) sits outside the editorial allowlist, while noting its claims are fully corroborated by allowlisted outlets.