Infostealers Target AI Developer API Keys in Memory Caches
Cybersecurity intelligence reports revealed that active infostealer malware campaigns are specifically targeting unencrypted developer API keys for Claude, OpenAI, and Hugging Face stored in local terminal history and cache files. Threat actors exploit compromised developer credentials to hijack high-tier model token allocations and exfiltrate private code repositories.
Primary sources