OpenCode Hacked: User credentials leaked

https://twitter.com/opencode/status/2111516673953935833

75•pranshuchittora•56m ago

Comments

pranshuchittora•55m ago

From OpenCode Team

---

Hi, We identified unauthorized access to a legacy system that we were in the process of decommissioning. Third party provider keys (eg OpenAI, Anthropic) saved in your workspace may have been exposed. Please revoke and replace those keys through the relevant provider’s dashboard, update any applications using them, and review recent usage for unexpected activity.

We’re sorry this happened and will follow up with any updates.

bewareofscams•33m ago

I told you so: https://news.ycombinator.com/item?id=49243119

Me, 68 days ago:

> Beware of the author of tweet, who happens to be author of OpenCode - OpenCode will leak all your data to themselves and to shady 3rd parties. Author feigned ignorance and never fixed the issue. OpenCode among other harnesses is the shadiest of all.

> https://github.com/anomalyco/opencode/issues/10416

lousken•6m ago

If i dont use any of their models nor i am signed in, is that a problem? i dont see anything in wireshark except for models.opencode.ai

fleshers•32m ago

I’m a bit confused by the wording here, does it mean the credentials were hacked and then used to perform a mass distillation campaign?

odo1242•24m ago

Yes

pranshuchittora•6m ago

It triggers me when these companies think that users are fool. I would have appreciated them, if they have disclosed things more transparently.

DavCreator•31m ago

https://xxcancel.com/opencode

vinni2•28m ago

But isn’t OpenCode open source why does it need credentials.

progval•25m ago

For the inference APIs, which need to bill users. It's unclear why OpenCode's servers (presumably) had access to the API credentials.

dist-epoch•19m ago

Maybe they support cloud agents.

himata4113•15m ago

They function similar to openrouter BYOK.

preommr•22m ago

Why are the comments pointing out there were warning signs early on being downvoted/flagged?

I looked at the linked comments, and they seem valid. I mean I dont want to go full tinfoil hat here, but what's the deal? Some people just really like opencode or something?

jchw•19m ago

I think it may just be bad automated flagging. I vouch'd them since they don't really seem to violate any rules/guidelines (right?)

himata4113•17m ago

Indeed. I've seen it happen before and it appears that they have automatic downvoting based on some criteria, possibly just some classifier. I've attributed it to some bot attack before, but it's a bit too common now.

dylan604•3m ago

Why does it being common downplay the bot attack to you? As time goes on, I'd assume bots activity to increase. I do not see it ever going away.

jchw•21m ago

I don't use OpenCode but I would like to know who this impacts. Surely people who are just using OpenCode locally with their own credentials wouldn't be impacted, right? This sounds like something where you have a hosted service and you put your keys into that. Not saying this isn't bad, but it isn't clear and they're not sharing any information.

pranshuchittora•11m ago

I am the author of this post. Looks like OpenCode fans / team is not happy with this post coming on the first page of HN. It has already been flagged by many. I never ask for upvotes, but would be great if you can upvote it. Thanks!

verbo_villain•9m ago

So are people going to wake up and see their Anthropic, openAI, etc accounts drained?

oldfuture•9m ago

https://news.ycombinator.com/item?id=50108261

that's why virustotal was flagging it then

Ciantic•4m ago

I think every API key system should have endpoint "invalidate_api_key" this way whitehat hackers or the party who stored them could invalidate all keys in the case they leak. Now it is race against the time, and everybody got email, and everyone must act themselves.

Tiberium•3m ago

It actually is a thing, although indirectly in a hacky way! If you push keys from GitHub secret scanning partners to a public repo or a gist, they get sent to the partner who (usually) instantly revoke them. So if you want to help someone, just make a public gist with the key and delete it like 15 seconds later, it'll be enough.

Sake-lang: Experimental language based on Ruby but with types for each operation

OpenCode possibly leaked byok provider credentials

YouGene: Genetics as Character Stats

Finding an Easter Egg in Microsoft Bob

Agent skill for designing iOS apps for iPhone Duo

Vela – A Linux desktop environment with a custom Wayland compositor

Microsoft and CMU Team Up to Train Early Career Software Engineers

MLB Plans to Play Stupid Games with Its Website Again in Upcoming Lockout

The origins of Stand-up comedy

University of Leicester to make redundant all pure math professors (2021)

Automatic Speech Processing by Inference in Generative Models (2004) [video]

When No ID Means No Internet

Getting my TOTP data out of Twilio's Authy app thanks to the GDPR

Owner of Former UWS Barbecue Restaurant Indicted for Wage Theft: Manhattan DA

Pattern Matching Beats Narrative Reasoning

We shrank Whisper large-v3 by 68%, below the size of turbo – Tileward

AI Can Write the Code. Who Verifies It?

TwMillion: 3 Years of DDNet's Tutorial – 3M runs at once

Show HN: ThemesFor.app – a static website builder that doesn't hide the HTML

PwnEscape: Guest-to-Host KVM Escape (CVE-2026-99999)

Rewrote my 2021 Browser Video editor with WebCodecs and got a 6x speedup

Is 10²⁵ FLOPs Still the Frontier?

Local-first AI proxy with keys in your OS vault

Query cycles: A compiler murder mystery

The Moral Case for Human Music

OpenCode reports security breach affecting 1.4% of Console users

Show HN: Pay-per-Crawl – make AI crawlers pay per page in USDC, for 10 stacks

Torvalds calls AI disclosure rules 'utterly stupid' as Linux drops its tag

Block Blast harvests its players for over $100M in ad money

OLTP is expensive, you can ClickHouse it