Expired50% confidenceFactExact time
Security researchers have repeatedly found that popular IDE cracking tools bundle information-stealing trojans (such as RedLine Stealer and Raccoon Stealer) that can extract browser passwords, cryptocurrency wallet private keys, SSH keys, and developer credentials such as AWS Access Keys and GitHub Tokens.
1
Sources
50%
Confidence
Medium-term (~90 days)
Relevance
7/2/2026
First Seen
This claim has expired. It is kept for the record and no longer describes the current state.
Valid until: 9/30/2026(expired)
Sources
PyCharm 2026.1 Deep Dive: Native AI Coding Assistant & Legitimate Licensing Guide
bilibiliMioHiro5/30/2026
Related Claims
Unverified封装安装包常见的恶意植入手段包括键盘记录器、后台挖矿程序和凭证窃取模块（扫描浏览器Cookie、本地密码管理文件和SSH密钥）74% similarUnverified被窃取的密钥被编码成数组形式伪装成正常数据外泄，可规避基于正则表达式的密钥泄露检测工具如GitHub Secret Scanning或TruffleHog72% similarUnverifiedUsing local proxy tools to take over AI IDE traffic carries security risks including plaintext storage and leakage of API keys, code data privacy being logged and uploaded, and man-in-the-middle attacks69% similarUnverifiedAfter a successful attack, the attacker can steal local sensitive credentials, including API Keys, GitHub Tokens, and cloud service keys.69% similarUnverifiedThe attack can steal sensitive credentials such as API keys and access tokens from the victim's development environment.68% similar
Cite This Claim
Stable URI
https://kongchang.com/claim/51554API
curl https://kongchang.com/api/v1/knowledge/claims/51554MCP
get_claim(id=51554)