Anomaly Innovations Breach Hits 1.4% of OpenCode Users — SkimNews

Get the Tech newsletter
Daily tech — startups, AI labs, chips, the launches that shape the next decade. Free.
- Anomaly Innovations disclosed a breach it characterized as a "large-scale distillation attack" that compromised the API keys of approximately 1.4% of OpenCode Console users.
- OpenCode, the open-source coding agent developed by Anomaly Innovations, was the product whose Console user base was hit, with affected users' credentials exposed in the incident.
Why it matters: Roughly 1.4% of OpenCode Console users must rotate compromised API keys immediately to block unauthorized use. The 'distillation attack' framing — a technique typically used to extract a model's behavior for replication — points to attackers targeting OpenCode's underlying AI capabilities rather than running up ordinary API bills.
Ask SkimNews




