Hackers hit AI coding tool OpenCode, running up charges on users’ AI accounts
Security incident at open-source coding assistant leads to stolen API credentials and unauthorised billing
Cyber attackers have breached infrastructure belonging to OpenCode, an open-source autonomous coding assistant, compromising user API credentials. The exfiltrated keys were subsequently used by intruders to consume model access and accumulate unauthorised compute charges on affected accounts. The project faced further friction during remediation when automated AI diagnostics refused to analyse the malicious code involved in the incident.
Original source
This summary was written by the GPU Data Hub desk from reporting published by TechCrunch on 19 Oct 2026, 19:28. Read the full article at the original publisher.
Read Original Source →Companies