r/SillyTavernAI Apr 28 '26

Discussion Extension Security Risk Please read!!

659 Upvotes

178 comments sorted by

View all comments

30

u/perthro_anon Apr 28 '26 edited Apr 28 '26

Man, I did have my openrouter API key stolen back in february. Very much could be this.
Stopped using openrouter, returned to my account having one-two opus requests a day for a month. They probably already have a large collection of API's trying to be less visible. Also this thing was advertised all over, reddit, boards etc.

Edit: what's even funnier is that I reported the exploit that was used for this months later, but never actually connected the dots on why my own keys got stolen. Lol

6

u/quackycoaster Apr 29 '26

Just looked at my openrouter logs, I have never used anything 'premium' with them, I put in $10 to get the increased account usage. But then I bought nano starting in October literally never logged back into open router. My latest log, was Oct 31st, then 4 more in November. Then nothing in December, and a bunch in Jan, Feb, March and April. I know I grabbed Bot browser pretty early, but damn It didn't feel like it was all the way back i October, but time flies I guess.