As reported by TechCrunch, OpenCode, a prominent open-source AI programming tool, recently revealed that unauthorized attackers managed to infiltrate one of its legacy systems. This security breach has impacted roughly 1.4% of users on the OpenCode Console platform. It's possible that certain third-party model API keys, which were stored within user workspaces, have been compromised. These keys are associated with service providers like OpenAI, Anthropic, and Google. OpenCode has promptly informed the affected users, urging them to revoke and replace their compromised keys, scrutinize recent call logs, and is working hand-in-hand with the relevant vendors to rectify the situation. Although the incident is believed to be linked to a large-scale distillation attack, the precise technical intricacies have yet to be fully disclosed.
