The current security struggle follows a breach of a legacy system that exposed OpenAI, Anthropic, and Google API keys for 1.4% of OpenCode Console users. Impacted customers reported unauthorized charges between $168 and $1,700, and some experienced account suspensions. OpenCode described the event as a "large scale distillation attack" and is currently working with the affected AI providers to remediate the breach.
