chiprook
← Security
SecurityOctober 18, 2026, 03:50

OpenCode Console breach hits ~1.4% of users and their API keys

Anomaly Innovations, the company behind the open-source coding agent OpenCode, disclosed a breach affecting OpenCode Console. About 1.4% of users and their API keys, including stored OpenAI keys, were exposed in what it called a "large scale distillation attack."

OpenCode Console breach hits ~1.4% of users and their API keys
#OpenCode#OpenAI#AnomalyInnovations
Read next
Security

ZoomEye: 1,032 Docker daemons with exposed API vs 1.4M hosts on port 2375

Security

Stolen AI API keys are paying for hackers' autonomous scans

Security

Rust env!() macro bakes API keys into desktop release builds

Security

vLLM's --api-key leaves /invocations, /tokenize and /pause open