OpenCode is an open-source AI Coding Agent that's become a popular alternative to claude Code and Cursor. But hackers got into part of its online platform and stole some users’ API keys, and the AI tools it turned to for help kept refusing to look at the malicious code.
TechCrunch AI
Hackers Breach OpenCode Platform, Steal Users' API Keys and Run Up AI Charges
Hackers compromised part of OpenCode's online platform, an open-source AI coding agent positioned as an alternative to Claude Code and Cursor, and stole some users' API keys, then ran up charges on their AI accounts. According to the report, AI tools that the attackers or defenders turned to for help refused to examine the malicious code. The incident highlights the security risk that API keys pose in AI developer tooling.
It signals a concrete security incident at a widely used open-source AI coding agent, relevant to developers who store API credentials in such tools.
Comments & Questions (0)
No comments yet
Be the first to comment!