OpenCode credential leak sparks HN pile-on: user warned 68 days ago about data sent to third parties
himanshustwts · x · 2026-10-18
OpenCode leaked user credentials, and an HN thread resurfaced a 68-day-old warning that the tool sends data to itself and "shady third parties" (GitHub issue #10416), with the author giving dismissive responses. Commenters also flagged unlisted data flows to OpenRouter and prompts routed through Cloudflare; even logged-out users see requests to models.opencode.ai in Wireshark.
More from coding & agent
- Meta, MIT and Yale propose ReHarness: backward revision for agentic continual learning — HanGuo97 · 2026-10-18
- 64 concurrent agents on one GB300: nemotron 120B hits ~7K tok/s aggregate — Sentdex · 2026-10-18
- Open-source MGnarf gate stops AI agents from approving their own actions — Glass_Expert_541 · 2026-10-18
- Self-built dashboard finds 62.9% of 66,757 server requests are automated — Thionne_WTZ · 2026-10-18
- The fill-in-the-blank prompt: Claude as motion director and Remotion coder, end to end — aziz4ai · 2026-10-18
- No After Effects needed: a 5-layer prompt has Claude script, Gemini voice and Remotion render motion graphics — aziz4ai · 2026-10-18