opencode 泄露波及 1.4% 控制台用户，含 Anthropic API key 被盗刷

thehype. @thehypedotnews原推发布于 2026.10.18

在 X 上打开原推

opencode breach hit 1.4% of its console users attackers reached openai, anthropic and google api keys through a legacy system opencode was shutting down. the company calls it a large scale distillation attack and is working with all three labs users on r/opencode say the keys were used before the notice came – $400 in anthropic charges, ~€200 on google and a project suspended for abuse the open-source cli is not named in the breach. keys kept in local env vars never reached opencode's servers

这条是引用着另一条写的：x.com/opencode/status/2111519637049319818