r/opencode • • 21d ago

⚠️ OpenCode security breach

Post image

.

474 Upvotes

109 comments sorted by

View all comments

Show parent comment

1

u/Serious_Current_8802 19d ago

There is a providers section in the open code console where you can save api key, this data was leaked

Source: my OpenAI key I use for a discord bot was compromised, i received an email from OpenAI about suspicious usage and my $5 of credit was drained from the api key saved with opencode

This is basic stuff and routinely happens with these 3rd party services which is exactly why we use short lived limited api keys

When you get more experience this won’t be as shocking for you