OpenCode Console

Reported Context (5)

OpenCode Console breached, users report unauthorized AI charges Weekly Security Roundup: PHP and Node.js Patches, OpenCode Breach, and More
The incident affected 1.4 percent of OpenCode Console users. OpenCode Says Breach May Have Exposed Third-Party API Keys for 1.4% of Console Users
An intruder reached a legacy system at OpenCode on the night of October 16 and may have exposed the third-party AI provider keys that users had saved in OpenCode Console, the company said. OpenCode Says Legacy-System Breach May Have Exposed Users’ AI Provider Keys
According to the project maintainer, the breach affected 1.4% of OpenCode Console users, with some reporting more than $1,700 in unauthorized charges overnight. OpenCode Says Breach Exposed Some Users’ External Provider API Keys
tied to what it calls a large scale distillation attack. OpenCode says the breach affected 1.4% of OpenCode Console users, specifically those who had external AI providers linked. The providers named are Anthropic, OpenCode Says Breach Affected 1.4% of Console Users With Linked AI Providers

CVE (4)

People (5)

Vendors (13)

Products (7)

Tools (3)

Industries (1)

Note: Related entities, including threat actors, malware, CVEs, MITRE ATT&CK techniques, vendors, products, tools, countries, and industries, are shown when they appear in the same reporting. Their presence does not necessarily mean they were targeted, compromised, vulnerable, responsible for the activity, or directly involved in the incident.