OpenCode breach hits 1.4% of Console users, with reports of $400 in unauthorized Anthropic charges
kimmonismus · x · 2026-10-18
Users of the AI coding tool OpenCode are reporting unauthorized API charges after a security breach, including one report of $400 spent on an Anthropic account.
OpenCode has confirmed that at least 1.4% of Console users were affected. According to the company's customer email, third-party provider keys stored in workspaces may have been exposed through unauthorized access to a legacy system that is being shut down.
More from coding & agent
- AI-driven compiler optimization spree: JSON.parse up to 2.9x faster, shift now linear — cramforce · 2026-10-18
- Papers with Code adds Auto-Research category, 166 papers already tracked — NielsRogge · 2026-10-18
- Use Claude to recursively optimize deps for native tsc — original types are on GitHub — cramforce · 2026-10-18
- Claude Code shows fake summarized thinking as assistant messages — ~37% of transcript — Sauers_ · 2026-10-18
- Dev builds a demon-summoning TUI for managing AI agents — voidwalker_com · 2026-10-18
- Fix wandering coding agents with a DOMAIN_INVARIANT.md file of domain rules — 0xkarasy · 2026-10-18