Hackers targeted OpenCode, an AI coding tool, by exploiting a legacy system to steal API keys for OpenAI, Anthropic, and Google. Users have reported unauthorized charges ranging from hundreds to over $1,700, with the attack described as a "distillation attack" where stolen credentials were used to harvest AI model outputs. This breach highlights the risks associated with storing API keys, as compromised keys can lead to immediate and significant financial losses. AI
IMPACT Highlights the security risks of storing API keys for AI models and the potential for financial loss due to breaches.
RANK_REASON The cluster describes a security breach affecting a specific AI tool, leading to user impact.
Read on Mastodon — mastodon.social →
AI-generated summary · Google Gemini · from 1 sources. How we write summaries →