OpenCode breach hits 1.4% of Console users, API key losses up to $1,700
mark_k · x · 2026-10-18
OpenCode suffered a breach affecting users who linked their own OpenAI, Anthropic or Google API keys: about 1.4% of Console users were hit, with reported losses from $168 to $1,700 and at least one OpenAI account suspended. OpenCode blames a 'distillation attack' on a legacy system; the local CLI is fine. Users who linked keys should rotate them now.
More from coding & agent
- Developer: under 48 hours of nonstop attacks, now needs agents running 24/7 too — gharik · 2026-10-18
- jasna, an open-source video restoration tool, hits 2.2k GitHub stars — Kruk2 · 2026-10-18
- mlabonne's llm-course passes 83k GitHub stars with roadmaps and Colab notebooks — mlabonne · 2026-10-18
- AWS guide: split one LLM across two EKS GPU nodes with prefill/decode workers — dl_weekly · 2026-10-18
- Three coordination patterns for multi-agent teams and 3 rules that stop looping — Dannick-Stark · 2026-10-18
- Cohestry: an MCP-connected 'second brain' app passes App Review first try — Emojinapp · 2026-10-18