OpenCode Breach Exposes Third-Party API Keys in Targeted Distillation Attack
Anomaly Innovations, the developer behind the open-source AI coding tool OpenCode, confirmed that a security breach exposed third-party API credentials stored by approximately 1.4% of its Console users. The unauthorized access targeted an internal legacy system during decommissioning and was leveraged to execute automated model distillation attacks against frontier AI providers. Update, Oct 19 The exposed keys are the ones users saved in OpenCode Console, the company's optional hosted service
