Hackers breached a portion of the OpenCode platform, stealing users' API keys and attempting to run up charges on their AI accounts. However, the AI coding tools used to process the malicious code repeatedly refused to execute the harmful requests, limiting the attack's effectiveness.
Background
OpenCode is an open-source AI coding agent that has gained popularity as an alternative to Claude Code and Cursor. The incident highlights growing security concerns around AI-powered development tools and API key management.
- Source
- TechCrunch
- Published
- Oct 20, 2026 at 03:28 AM
- Score
- 6.0 / 10