Hackers exploited a vulnerability in the OpenCode coding agent platform to steal user API keys. The breach allowed attackers to run unauthorized workloads on users' connected AI service accounts.
HOW THIS AFFECTS YOU
●
builderYou must implement stricter API key handling and monitor for anomalous usage patterns.
●
founderYou should prioritize platform security to prevent catastrophic liability from stolen customer credentials.