Công cụ lập trình OpenCode AI bị xâm phạm, 1,4% người dùng bị ảnh hưởng

The Huoxing Finance report, citing NetEase’s DeepTech, states that the open-source AI programming tool OpenCode has officially confirmed a breach, affecting approximately 1.4% of OpenCode Console users, with some model API keys stored on the platform potentially leaked. Multiple developers reported unusual charges on their accounts used to invoke models from OpenAI, Anthropic, and others, with some reporting losses of hundreds of dollars and others over $1,700. The official statement links the incident to a large-scale distillation attack and confirms ongoing collaboration with OpenAI, Anthropic, and Google. OpenCode was developed by personnel from the Anomaly team, with one of its primary creators being Dax Raad; the team previously worked on projects such as SST and OpenNext. In addition to local applications, its cloud-based Console service allows users to centrally store and proxy API keys from vendors like OpenAI, Anthropic, and Google—this cloud service was the target of the breach. The notification email states that attackers gained unauthorized access to an old system currently being decommissioned, potentially exposing third-party model API keys in some Console workspaces. Developer Colin Parsons reported unusual charges of approximately $281 on his OpenAI account and $168 on his Anthropic account, while Preston Zeller reported losses of approximately $1,700. Other users reported approximately $400 in unusual charges on Anthropic and account restrictions triggered by abnormal usage of Google services. OpenCode has notified affected users to revoke and rotate their keys and review recent invocation records. Lydia Hallie, a member of the Anthropic Claude Code team, stated that Anthropic has collaborated with OpenCode to revoke Claude API keys deemed compromised. Tibo, a member of the OpenAI team, said they are working with OpenCode to help affected API users restore access and refund credits consumed during the attack. Dax Raad clarified that only the OpenCode Console was affected—not the locally run OpenCode—and API keys configured directly within local tools were never transmitted to OpenCode servers. On October 18, he stated on social media that attackers had been persistently attempting to breach the system over the past 48 hours, and the team is strengthening its defenses.