OpenCode Breach Exposed API Keys for 1.4% of Users — Rotate Yours Now
Anomaly Innovations (formerly SST), the company behind the open-source coding agent OpenCode, confirmed on October 17 that a large-scale attack on a legacy console system exposed stored OpenAI, Anthropic and Google API keys for about 1.4% of users. Affected developers were notified by email and told to rotate keys immediately — some users reported unauthorized charges before the notice landed. Full story in the slides above. Sources: Startup Fortune, AIToolsRecap, Dev Community (dev.to), Medium. ...