OpenCode hacked: API keys stolen, users told to revoke; gateway egress control as defense
pjausovec · x · 2026-10-18
- Confirmed incident: OpenCode suffered a large-scale attack where adding an API key or provider for LLM authentication could result in key theft; the team confirmed the breach and urged users to revoke keys.
- Mitigation: Routing agent traffic through a gateway/proxy like agentgateway keeps keys on the backend, where they can be locked down, secured, governed, and observed.
- Takeaway: Egress control is critical — placing an AI gateway between agents and LLM providers significantly reduces exposure to this class of attack.
Related event: OpenCode Hit by Distillation Attack, API Keys Stolen from 1.4% of Users(5 posts)→
More from coding & agent
- Fully agentic MV pipeline: Claude + MiniMax H3 renders 28 scenes with 0ms sync drift — Cheap_Credit_3957 · 2026-10-18
- Dev builds seamless laptop/web/mobile dev env with Claude Code self-hosted runners + Tailscale — davidcrawshaw · 2026-10-18
- SOC Prime launches LogTotal: rule-first log analysis with AI interpretation at the end — cyb3rops · 2026-10-18
- Thorsten Ball: A 'wrong' code push matters far less now that AI makes changes cheap — sloppenheimer · 2026-10-18
- Every trains a Slack agent to edit like its editor-in-chief using a custom skill — every · 2026-10-18
- jedisct1: cross-language calls need just a serialization format and plain FFI, not WASM — jedisct1 · 2026-10-18