OpenCode Console API Key Breach Saga
The saga follows the discovery of a breach at Anomaly Innovations that exposed API keys for about 1.4% of OpenCode Console users, leading to unauthorized charges after the console was attacked. The latest episode reports that the leak has resulted in widespread unauthorized usage, and the incident remains under investigation.
-
OpenCode Console attack leaks API keys, leading to unauthorized charges
In mid-October, the online service for the AI coding tool OpenCode, called OpenCode Console, was attacked, resulting in the leak of OpenAI, Anthropic, and Google API keys stored by users. The attack…
1 source -
Anomaly Innovations reports breach exposed API keys for ~1.4% of OpenCode Console users
Anomaly Innovations confirmed a security breach on October 17, 2026, affecting roughly 1.4% of OpenCode Console users, where attackers accessed stored API keys for Anthropic, OpenAI, and Google…
4 sources