An unauthorized party accessed a legacy OpenCode system, potentially exposing third-party AI provider API keys belonging to users. The credentials, including those for OpenAI, Anthropic, and Google, were stored within the platform’s optional hosted console service.
READ THE ORIGINAL ARTICLE AT THEHACKERNEWS.COM →