PulseAugur
中
实时 20:55:25
English(EN) 🤖 Hackers hit AI coding tool OpenCode, running up charges on users’ AI accounts OpenCode is an open-source AI coding agent that's become a popular alternative t

AI编码工具OpenCode遭入侵,用户AI服务被收费

一款开源AI编码工具OpenCode遭遇安全漏洞,攻击者访问了其OpenCode Console平台上存储的用户API密钥。这使得攻击者能够利用OpenAI、Anthropic和Google AI等AI服务,在用户账户上产生巨额费用。此次事件凸显了防御AI驱动的网络攻击所面临的挑战,因为OpenCode使用的AI防御代理最初因安全过滤器而拒绝分析恶意代码,这是Hugging Face之前也遇到过的问题。 AI

影响 凸显了AI工具中的安全漏洞以及利用AI防御AI驱动攻击的挑战。

排序理由 AI相关工具的安全漏洞,而非核心AI模型发布或研究。

在 Mastodon — mastodon.social 阅读 →

AI 生成摘要 · Google Gemini · 来自 2 个来源。 我们如何撰写摘要 →

AI编码工具OpenCode遭入侵,用户AI服务被收费

本文如何被排名

Signal score
19 / 100
Composite score across the factors below. Higher = stronger signal that this story matters right now.
Newsworthiness bucket
Tool
AI相关工具的安全漏洞,而非核心AI模型发布或研究。
Source corroboration
2 independent sources
Multiple independent publishers reporting the same story raises confidence that it's real and newsworthy.
Topics
product, safety
Editorial topic classification. Feeds into how the story surfaces on /topic/<slug> hub pages and into the per-entity coverage mix.
AI-industry relevance
High
Clearly on-topic for AI-industry coverage.
Story freshness
Breaking (< 6h)
Fresh story with cross-source coverage still developing. Ranking may shift as more sources report.

完整方法见我们的编辑标准。

报道来源 [2]

  1. TechCrunch AI TIER_1 English(EN) · Aditya Mehta ·

    黑客攻击AI编码工具OpenCode,盗刷用户AI账户

    OpenCode is an open-source AI coding agent that's become a popular alternative to Claude Code and Cursor. But hackers got into part of its online platform and stole some users’ API keys, and the AI tools it turned to for help kept refusing to look at the malicious code.

  2. Mastodon — mastodon.social TIER_1 English(EN) · [email protected] ·

    🤖 黑客攻击AI编码工具OpenCode,盗用用户AI账户OpenCode是一个开源AI编码代理,已成为流行的替代方案

    🤖 Hackers hit AI coding tool OpenCode, running up charges on users’ AI accounts OpenCode is an open-source AI coding agent that's become a popular alternative to Claude Code and Cursor. But hackers got into part of its online platform and stole some users’ API keys, and the AI...…