OpenCode breach hits 1.4% of users in large-scale distillation attack targeting OpenAI/Claude keys
thedealdirector · x · 2026-10-18
OpenCode disclosed a security breach tied to a "large-scale distillation attack" affecting 1.4% of OpenCode Console users, all notified by email; only users who had external providers linked were impacted. The incident is ongoing, with OpenCode working with Anthropic, OpenAI, and Google on remediation.
The irony, as one commenter noted: most OpenCode usage runs Chinese models, but the only valuable trophy for the attacker was OpenAI and Claude keys — enabling the distillation attack in the first place.
More from Safety
- Aligning AI: hard engineering problem or existential threat? A three-hypothesis breakdown — sayashk · 2026-10-18
- Claude Code shows fake summarized thinking as assistant messages — ~37% of transcript — Sauers_ · 2026-10-18
- Claude helps uncover that Skipjack cipher's s-box comes from srand48(48571) — matthew_d_green · 2026-10-18
- Polymarket puts US AI safety bill odds at just 7% by end of 2026 — Polymarket · 2026-10-18
- Chilson flips the critique: AI safety community's resistance may cost it credibility — neil_chilson · 2026-10-18
- Security experts warn AI agents are highly vulnerable to phishing with hidden malicious instructions — Polymarket · 2026-10-18