Open-source AI agent OpenCode has reported a security incident affecting 1.4% of its web console users. An attacker gained access to an older, soon-to-be-decommissioned system and potentially obtained API keys for OpenAI, Anthropic, and Google stored within user workspaces. This breach is linked to a "large-scale distillation attack," and affected users have been notified via email. OpenCode is collaborating with OpenAI, Anthropic, and Google to resolve the ongoing incident, which primarily impacts users with linked providers and does not affect the local CLI. AI
IMPACT Exposed API keys could lead to unauthorized access and unexpected costs for users of AI services like OpenAI, Anthropic, and Google.
RANK_REASON Security incident involving an AI agent's platform and exposure of third-party API keys.
Read on Mastodon — mastodon.social →
AI-generated summary · Google Gemini · from 1 sources. How we write summaries →