JetBrains is and has always been a Czech (and, thus, EU) company, not a Russian one. Yes, the founders are Russian, but that does not make the company so. They did have Russian offices, but closed them after the start of the Ukraine war [1].

The only confirmed link to the SolarWinds attack seems to be that SolarWinds was using TeamCity (JetBrains' CI/CD product) and that this was alledgedly used as a "gateway" to SolarWinds' systems - which doesn't require any cooperation from JetBrains, just an unpatched security issue. In fact, a patch by JetBrains for the exploited issue seems to have been available, but was not installed [2].

So while any company deserves scrutiny, these particular allegations against JetBrains smell like FUD to me.

See also JetBrains' own statements on the SolarWinds thing: https://blog.jetbrains.com/blog/2021/01/06/statement-on-the-...

[1]: https://en.wikipedia.org/wiki/JetBrains

[2]: https://www.cisa.gov/news-events/cybersecurity-advisories/aa...