Hackers hit AI coding tool OpenCode, stealing users' API keys
TechCrunch AI · rss · 2026-10-20
OpenCode, a popular open-source AI coding agent pitched as an alternative to Claude Code and Cursor, was hacked: attackers stole some users' API keys and ran up charges on their AI accounts. Ironically, the AI tools consulted for help kept refusing to look at the malicious code.
More from coding & agent
- ClaudeBot crawler observed regularly fetching sitemap files for URL discovery — gaganghotra_ · 2026-10-20
- Evals are the definition of done: 'Demo-ready' isn't 'monetize-ready' for AI agents — leveragedupside · 2026-10-20
- Cloudflare Workers often break subdomain-as-subfolder redirects for VPN users, causing 404s — gaganghotra_ · 2026-10-20
- Codex's new suggested-next-prompt is 'scary good', devs say — charliermarsh · 2026-10-20
- Stripe Atlas adds MCP support so AI agents can incorporate your startup — jeff_weinstein · 2026-10-20
- Cross-Agent Verification: Use Codex as a Read-Only Reviewer for Claude's Code — umeshonai · 2026-10-20