OpenCode Console Breach Exposes Third-Party API Keys of Its Users

A security breach of the OpenCode console exposed third-party API keys belonging to its users. One report said the keys belonged to OpenAI, Anthropic, and Google, and that the attack involved credential theft and model distillation in October 2026. The news matters to companies and developers that rely on these services and keys.

AI-written summary of 2 sources; every verified point is backed by a verbatim quote. How Iyan works

• The breach exposed API keys belonging to OpenAI, Anthropic, and Google.

  «كشف اختراق وحدة تحكم OpenCode عن مفاتيح واجهات برمجة تابعة لشركات OpenAI وAnthropic وGoogle»

  Rescana
• The attack was described as credential theft and model distillation, and took place in October 2026.

  «ضمن هجوم سرقة بيانات اعتماد وتقطير للنماذج في أكتوبر 2026»

  Rescana
• The breach exposed third-party keys belonging to users of the console.

  «كشف اختراق أمني لمنصة OpenCode عن تعريض مفاتيح واجهات برمجة تطبيقات تابعة لجهات خارجية لمستخدمي وحدة التحكم»

  CyberSecurityNews
• The news is relevant to developers who rely on these keys.

  «ويهم الخبر المطورين الذين يعتمدون على هذه المفاتيح.»

  CyberSecurityNews

Iyan — See it for yourself. What changed in your world today, why it matters, and how we know.
How it works • Privacy • Terms