OpenCode hack exposes API keys amid AI distillation attacks
BleepingComputer published a report headlined "OpenCode hack exposes API keys amid AI distillation attacks." According to the headline, a hack involving OpenCode resulted in exposed API keys, and the report frames the incident alongside AI distillation attacks. The supplied source text is limited to the headline and a truncated HTML fragment, so it does not include the body of the article. Because the excerpt is thin, specifics beyond the headline cannot be confirmed from the source. The text does not state how many API keys were exposed, which OpenCode versions or deployments were involved, who carried out the hack, or how the distillation attacks relate to the key exposure. It also does not describe any response, notification, or remediation status. The only source-grounded facts are that a hack occurred, that it exposed API keys, that OpenCode is named, and that the coverage links the incident to AI distillation attacks.
The source reports that a hack involving OpenCode exposed API keys, a credential type developers use to access AI services.