Hackers breach OpenCode Console and run up AI account charges for users
Original titleHackers hit AI coding tool OpenCode, running up charges on users’ AI accounts
Attackers broke into an older OpenCode Console system and exposed API keys for 1.4% of its users, causing unauthorized charges on their OpenAI, Anthropic, and Google AI accounts.
OpenCode said the open-source app and command-line tool were not affected, and that its own defensive work was slowed when commercial models refused to analyze the malicious code until it gained access to OpenAI's Daybreak Blue program.
The source shows how safety filters on commercial AI models can block defenders during a live breach, a tension relevant to anyone weighing closed versus open models for security work.
Source: TechCrunch · AI · techcrunch.comPublished · added here