Expired50% confidenceFactExact time
Security researchers have repeatedly found that popular IDE cracking tools bundle information-stealing trojans (such as RedLine Stealer and Raccoon Stealer) that can extract browser passwords, cryptocurrency wallet private keys, SSH keys, and developer credentials such as AWS Access Keys and GitHub Tokens.
1
Sources
50%
Confidence
Medium-term (~90 days)
Relevance
7/2/2026
First Seen
Valid until: 9/30/2026(expired)
Sources
PyCharm 2026.1 Deep Dive: Native AI Coding Assistant & Legitimate Licensing Guide
bilibiliMioHiro5/30/2026
Related Claims
Unverified封装安装包常见的恶意植入手段包括键盘记录器、后台挖矿程序和凭证窃取模块（扫描浏览器Cookie、本地密码管理文件和SSH密钥）74% similarUnverified被窃取的密钥被编码成数组形式伪装成正常数据外泄，可规避基于正则表达式的密钥泄露检测工具如GitHub Secret Scanning或TruffleHog72% similarUnverifiedAfter a successful attack, the attacker can steal local sensitive credentials, including API Keys, GitHub Tokens, and cloud service keys.69% similarUnverifiedThe attack can steal sensitive credentials such as API keys and access tokens from the victim's development environment.68% similar
Cite This Claim
Stable URI
https://kongchang.com/claim/51554API
curl https://kongchang.com/api/v1/knowledge/claims/51554MCP
get_claim(id=51554)