A security breach at OpenCode Console has led to the misuse of API keys, resulting in financial losses for users. One user reported that their Anthropic API key, stored in OpenCode, was used for Opus calls, depleting their account balance. OpenCode has acknowledged the breach, which began on October 17th, and is reportedly in discussions with providers regarding reimbursement, though users have faced initial difficulties in obtaining refunds. AI
IMPACT Highlights the security risks associated with third-party tools that handle sensitive API keys for AI services.
RANK_REASON Security incident involving a third-party tool that stores API keys.
AI-generated summary · Google Gemini · from 1 sources. How we write summaries →
