CERT24OpenCode hack exposes API keys amid AI distillation attacks
The open-source AI coding project OpenCode reported that a security breach exposed stored API keys belonging to some users connected to external providers. According to the OpenCode maintainer, the breach affected 1.4% of OpenCode Console users. Some users reported unauthorized API charges and suspended Google Cloud projects.