Hackers Hit OpenCode, Steal User API Keys — SkimNews
Get the Tech newsletter
Daily tech — startups, AI labs, chips, the launches that shape the next decade. Free.
- Hackers breached part of OpenCode's online platform and stole some users' API keys, using them to run up charges on victims' AI accounts.
- OpenCode turned to AI tools for help investigating the intrusion, but those tools repeatedly refused to examine the malicious code.
Why it matters: Users of a popular AI coding tool just had their API keys weaponized against them — and even the defensive AI helpers refused to analyze the attack, showing attackers can exploit both a platform's API plumbing and the safety guardrails built into the assistant systems meant to defend it.
Ask SkimNews
