OpenCode leak hit Console, not the local CLI

The OpenCode breach affected the hosted OpenCode Console service that stores provider credentials, not the local CLI agent. The vendor reported unauthorized access to a legacy system being decommissioned and advised users to revoke and replace provider keys such as OpenAI and Anthropic.

• The leak affected OpenCode Console, not the local CLI agent
• Vendor cited access to a legacy system being decommissioned
• Provider keys stored in workspaces may have been exposed
• Vendor advised revoking and replacing keys at providers