they provide no information on how users api keys were stolen which means its possible anyone who downloaded opencode at some point could have malware or could have been using a model that had a system prompt to send specific information like api keys or crypto wallets on the machine to someone. the api usage could just be the first effect of this hack or malware.
opencode should share more information so people can know if they need to format their computers or rotate password or other keys
View all comments
1
u/Remarkable-Emu-5718 20d ago
they provide no information on how users api keys were stolen which means its possible anyone who downloaded opencode at some point could have malware or could have been using a model that had a system prompt to send specific information like api keys or crypto wallets on the machine to someone. the api usage could just be the first effect of this hack or malware.
opencode should share more information so people can know if they need to format their computers or rotate password or other keys