Hackers breach OpenCode platform, steal API keys and run up user charges
Source Summary
OpenCode, a popular open-source AI coding agent, suffered a security breach in which hackers accessed part of its online platform and stole users' API keys. The stolen credentials were used to run up charges on users' AI accounts. When OpenCode sought help from AI tools to analyze the malicious code, those tools declined to examine it.
Why it matters
The breach demonstrates vulnerability in open-source AI development platforms and shows that AI safety systems may refuse to assist in breach investigation, complicating incident response.
What remains uncertain
The source does not specify the full scope of the breach, the number of affected users, or the total financial impact on compromised accounts.
