Some OpenCode users found out their AI keys were stolen when the bill showed up, before the company had even told them. OpenCode makes a coding assistant. Its paid web dashboard, called Console, let
Why CEREBRO kept it
OpenCode API key theft incident; security signal for agent users
The text below is an automated extraction of the article at https://x.com/sentient_agency/status/2112126626276532542, stored verbatim in the public cerebro-vault repository. Copyright remains with the original publisher (x.com).
OpenCode makes a coding assistant. Its paid web dashboard, called Console, let
> OpenCode API key theft incident; security signal for agent users
Some OpenCode users found out their AI keys were stolen when the bill showed up, before the company had even told them.
OpenCode makes a coding assistant. Its paid web dashboard, called Console, let people save their OpenAI, Anthropic and Google keys on OpenCode's servers.
On the night of October 16, someone broke into an old system the company was in the middle of shutting down. Saved keys for 1.4% of Console users may have been exposed.
If you only used the app on your own computer, your keys never left your machine. Anthropic has already cancelled the affected Claude keys.
If any app is
Backlinks
Appeared in 1 briefing