OpenCode Security Breach Affects Users' API Keys
Developing
Confidence
80%
Impact: 70%
Updated 10m agoConsensus Brief
OpenCode, an open-source AI coding tool, experienced a security breach affecting 1.4% of its users on the OpenCode Console, where API keys are stored. The breach led to unauthorized charges on users' accounts, prompting responses from AI companies like Anthropic and Google to block exposed keys. OpenCode is currently processing refunds for the unauthorized charges.
What Changed Since Last Update
10m ago
New corroborating source added: TechCrunch published an update on Mon, 19 Oc ("Hackers hit AI coding tool OpenCode, running up charges on users’ AI accounts").
Claim Ledger
4 claims tracked across sources
Role-Based Impact Analysis
Source Timeline
12 sources corroborating