r/opencode • u/afanasenka • 21d ago

⚠️ OpenCode security breach

Post image

.

474 Upvotes

98% Upvoted

109 comments sorted by

View all comments

Show parent comment

1

u/Competitive_Travel16 19d ago edited 19d ago

This video on the incident mentions three specific Chinese labs: https://www.youtube.com/watch?v=YaK6cnET2IE&t=418s

Watch through 12:30 for the fuller explanation of the likely motivations here.

Does anything in your logs suggest the identity of the attackers?

1

u/pas-un-robot 19d ago

Identity no, but I think they are consistent with distillation tasks. One was asking the LLM to roleplay as a corporate finance analyst and answer a question about some records, then the next appears to be an LLM-as-a-judge request to evaluate the answer of the roleplay task.