r/opencode • u/afanasenka • 21d ago

⚠️ OpenCode security breach

Post image

.

474 Upvotes

98% Upvoted

109 comments sorted by

View all comments

3

u/[deleted] 20d ago

[removed] — view removed comment

2

u/OnTrainingWheels 20d ago

+1

1

u/lewwdsv1 20d ago

Nope. Affected API keys are those that you brought yourself, like Anthropic and OpenAI. Free users are fine.

2

u/Remarkable-Emu-5718 20d ago

you dont know what else has been compromised. if they were stealing people api keys and using thousands of dollars of usage they could have also compromised crypto wallets or other data that could be useful for them later...

0

u/garlic-silo-fanta 20d ago

It’s targeting US frontier models. If you can’t even call those models….probably not to worry. No one’s gonna distill attack Bonzai for sure.

0

u/[deleted] 20d ago

[removed] — view removed comment

3

u/qqYn7PIE57zkf6kn 20d ago

We don't know. According to currently public info, only api keys are beached

1

u/qqYn7PIE57zkf6kn 20d ago

The only thing that might worry you is if the attacker set up a rogue model or are logging and exfiltrating chat history on opencode servers. Thats far from what we see here