OpenCode said attackers breached an older system, affecting 1.4% of users of its Console service, where some users stored AI-provider API keys; its open-source app and command-line tool were not affected. Users reported unauthorized charges, and OpenCode said refunds were underway. The company has not detailed how access was gained or the full extent of misuse.}}}}⟩ бозҩсcheduled? Need output valid JSON schema. Current malformed? Count braces: {
Sources
https://techcrunch.com/2026/10/19/hackers-hit-ai-coding-tool-opencode-running-up-charges-on-users-ai-accounts/
Anthropic and Google both blocked the API keys they believed were exposed, while OpenAI said it worked with OpenCode to restore access and refund its API customers for credits used in the attack. OpenCode said refunds for unauthorized charges are underway.