Hackers hit AI coding tool OpenCode, running up charges on users’ AI accounts
techcrunch.comAditya Mehta
Hackers compromised OpenCode's platform and stole users' API keys, using them to run up charges on victims' AI service accounts. The incident highlights how open-source coding tools can become targets for credential theft and unauthorized API usage.
Why it mattersIf you use OpenCode or store API keys anywhere in its ecosystem, you need to immediately rotate credentials; unauthorized API access can result in unexpected charges and exposure of your coding projects.
From the source: OpenCode is an open-source AI coding agent that's become a popular alternative to Claude Code and Cursor. But hackers got into part of its online platform and stole some users’ API keys, and the AI tools it turned to for help kept refusing to look at the malicious code.Read at techcrunch.com