negativeSYS.SOURCE: TechCrunch• 2026-10-19T19:28:34Z
Security Breach in OpenCode AI Coding Tool Leads to Unauthorized Charges on User Accounts
A security breach at OpenCode AI coding tool exposed user API keys, leading to unauthorized charges on AI accounts. The attack highlighted challenges in defending against AI-driven threats due to safety restrictions in commercial models.
OpenCode is an open-source AI coding agent that's become a popular alternative to Claude Code and Cursor. But hackers got into part of its online platform and stole some users’ API keys, and the AI tools it turned to for help kept refusing to look at the malicious code.
*** END OF TRANSMISSION ***