PulseAugur
EN
LIVE 20:55:00

AI coding tool OpenCode breached, users hit with AI service charges

By PulseAugur Editorial · [2 sources] ·

An open-source AI coding tool, OpenCode, experienced a security breach where attackers accessed user API keys stored on its OpenCode Console platform. This allowed the attackers to run up significant charges on users' accounts with AI services like OpenAI, Anthropic, and Google AI. The incident highlighted challenges in defending against AI-driven cyberattacks, as AI defensive agents used by OpenCode initially refused to analyze malicious code due to safety filters, a problem previously encountered by Hugging Face. AI

IMPACT Highlights security vulnerabilities in AI tools and the challenges of using AI for defense against AI-driven attacks.

RANK_REASON Security breach of an AI-adjacent tool, not a core AI model release or research.

Read on Mastodon — mastodon.social →

AI-generated summary · Google Gemini · from 2 sources. How we write summaries →

AI coding tool OpenCode breached, users hit with AI service charges

How we ranked this

Signal score
19 / 100
Composite score across the factors below. Higher = stronger signal that this story matters right now.
Newsworthiness bucket
Tool
Security breach of an AI-adjacent tool, not a core AI model release or research.
Source corroboration
2 independent sources
Multiple independent publishers reporting the same story raises confidence that it's real and newsworthy.
Topics
product, safety
Editorial topic classification. Feeds into how the story surfaces on /topic/<slug> hub pages and into the per-entity coverage mix.
AI-industry relevance
High
Clearly on-topic for AI-industry coverage.
Story freshness
Breaking (< 6h)
Fresh story with cross-source coverage still developing. Ranking may shift as more sources report.

Full methodology in our editorial standards.

COVERAGE [2]

  1. TechCrunch AI TIER_1 English(EN) · Aditya Mehta ·

    Hackers hit AI coding tool OpenCode, running up charges on users’ AI accounts

    OpenCode is an open-source AI coding agent that's become a popular alternative to Claude Code and Cursor. But hackers got into part of its online platform and stole some users’ API keys, and the AI tools it turned to for help kept refusing to look at the malicious code.

  2. Mastodon — mastodon.social TIER_1 English(EN) · [email protected] ·

    🤖 Hackers hit AI coding tool OpenCode, running up charges on users’ AI accounts OpenCode is an open-source AI coding agent that's become a popular alternative t

    🤖 Hackers hit AI coding tool OpenCode, running up charges on users’ AI accounts OpenCode is an open-source AI coding agent that's become a popular alternative to Claude Code and Cursor. But hackers got into part of its online platform and stole some users’ API keys, and the AI...…

    LINKS techcrunch.com/…/hackers-hit-ai-coding-to…

RELATED ENTITIES

RELATED TOPICS