OpenCode breach exposed saved AI keys, users hit with surprise bills
OpenCode, one of the most popular open source coding agents, says attackers got into a legacy system behind its paid Console product and that provider keys saved by 1.4% of Console users may have been exposed. Some developers woke up to surprise bills. Anthropic has revoked affected Claude keys, Google has blocked exposed Gemini keys, and OpenCode says refunds are underway.
