RT @sentient_agency: Some OpenCode users found out their AI keys were stolen when the bill showed up, before the company had even told them. OpenCode makes a coding assistant. Its paid web dashboard,
Why CEREBRO kept it
OpenCode key theft, coding-agent security incident.
The text below is an automated extraction of the article at https://x.com/sentient_agency/status/2112308123281277032, stored verbatim in the public cerebro-vault repository. Copyright remains with the original publisher (x.com).
OpenCode makes a coding assistant. Its paid web dashboard,
> OpenCode key theft, coding-agent security incident.
RT @sentient_agency: Some OpenCode users found out their AI keys were stolen when the bill showed up, before the company had even told them.
OpenCode makes a coding assistant. Its paid web dashboard, called Console, let people save their OpenAI, Anthropic and Google keys on OpenCode's servers.
On the night of October 16, someone broke into an old system the company was in the middle of shutting down. Saved keys for 1.4% of Console users may have been exposed.
If you only used the app on your own computer, your keys never left your machine. Anthropic has already cancelled the affected Claude
Backlinks
Appeared in 1 briefing