Hackers Hit AI Coding Tool OpenCode and Run Up Charges on User Accounts
· Technology · TechCrunch
Hackers breached an older system belonging to open-source AI coding agent OpenCode overnight, affecting 1.4 percent of users on its online platform, OpenCode Console. The breach exposed API keys stored in workspaces, enabling attackers to run up unauthorized charges ranging from hundreds of dollars to over $1,000 on individual accounts. Affected developers reported receiving unexpected spending alerts from OpenAI, Anthropic, and Google AI while the incident unfolded. Anthropic and Google subsequently blocked the exposed API keys, while OpenAI worked with OpenCode to restore access and refund affected customers. OpenCode co-founder Dax Raad stated that attackers had been attempting to breach their systems continuously for 48 hours, forcing the team to run AI defensive agents around the clock.
Why it matters
Developers using AI coding assistants face financial risks when platform security lapses expose their API keys to unauthorized actors. The incident underscores the challenges companies face in defending against large-scale, automated cyberattacks.
Read the original report — TechCrunch
Join us on Telegram
Breaking news the moment it lands. At 10,000 members we ship the Android app.