OpenCode Discloses Security Breach, Says Attackers May Have Accessed Users' OpenAI, Anthropic And Google API Keys

OpenCode discloses distillation attack that hit 1.4% of Console users

The breach highlights the growing need for robust security measures in AI platforms, as attackers exploit vulnerabilities for competitive advantage.

OpenCode Discloses Security Breach, Says Attackers May Have Accessed Users' OpenAI, Anthropic And Google API Keys

OpenCode, the open-source AI coding agent that lets developers plug their own API keys from OpenAI, Anthropic, Google and dozens of other providers...

OpenCode breach exposes stored OpenAI and Anthropic keys, prompts urgent key rotation

Anomaly Innovations, the company behind OpenCode, emailed users on October 17 warning that stored OpenAI, Anthropic and Google keys may have leaked through a legacy console system still being shut down.