OpenCode is an open-source AI coding agent that's become a popular alternative to Claude Code and Cursor. But hackers got into part of its online platform and stole some users’ API keys, and the AI tools it turned to for help kept refusing to look at the malicious code.
Hackers hit AI coding tool OpenCode, running up charges on users’ AI accounts
TE TechCrunch 
Key takeaways
Hackers exploited OpenCode, causing unauthorized charges on users' AI accounts through a security breach affecting 1.4% of users.
- Attackers accessed API keys, leading to unauthorized charges on AI accounts.
- OpenCode notified affected users and is processing refunds for unauthorized charges.
- Some users reported hundreds to thousands of dollars in charges from the breach.
Summarised automatically by AI from the original article by TechCrunch. AI can make mistakes, so check the original for details.
Read the full story on TechCrunch You've read the opening, about 49 of 792 words. The full piece is published by TechCrunch.
Continue reading ↗ Story details
- Published
- By
- Aditya Mehta
- Section
- AI
- Length
- 792 words · about 3 min read
- Format
- Article
- Original
- techcrunch.com ↗
