OpenCode warns Console users of possible third-party API key exposure
An intruder accessed a legacy system on October 16, potentially exposing credentials stored in hosted workspaces. OpenCode urged users to rotate provider keys, RuntimeWire reported. The breach affected 1.4% of Console users, according to Cyber Security News, which also reported that OpenCode was working with Anthropic, OpenAI and Google on its response.
- Console lets teams access provider models using a key saved in their workspace.
Covered by 4 publishers within 39 hours of the first report.
- The Hacker News: OpenCode Console Breach May Have Exposed OpenAI, Anthropic, and Google API Keys
- Latest TechCrunch: Hackers hit AI coding tool OpenCode, running up charges on users’ AI accounts
Reporting4
Cyber Security News OpenCode Security Breach Exposes Third-Party API Keys of its Console Users · Guru Baran
The Hacker News OpenCode Console Breach May Have Exposed OpenAI, Anthropic, and Google API Keys · info@thehackernews.com (The Hacker News)
BleepingComputer OpenCode hack exposes API keys amid AI distillation attacks · Bill Toulas
TechCrunch Hackers hit AI coding tool OpenCode, running up charges on users’ AI accounts · Aditya Mehta