Those keys are now presumably hard at work running large-scale model distillation attacks — someone's building a knockoff AI empire on your tab. The company called it out themselves on X, which, respect.
Might I also upsell you our Hindsight Firewall? Worthless, but the box looks great.
Rotate your API keys immediately and audit your AI service accounts for any surprise charges you definitely did not authorize. (2/3)
Reward: You've received a Chargeback Coupon — void where applicable, which is everywhere.
#Cybersecurity #APIsecurity #OpenCode #AccountCompromise #AITools #IncidentResponse (3/3)
TechCrunchHackers hit AI coding tool OpenCode, running up charges on users’ AI accounts | TechCrunchOpenCode is an open source AI coding agent that's become a popular alternative to Claude Code and Cursor. But hackers got into part of its online platform and stole some users’ API keys, and the AI tools it turned to for help kept refusing to look at the malicious code.
