OpenCode in the Media

OpenCode Data Breach Exposes API Keys Linked to Third-Party Services

OpenCode has reported a security breach affecting 1.4% of its Console users, which it attributes to a “large-scale distillation attack.” The company said the affected accounts belong to a subset of users who had connected external providers. However, the public disclosure did not clarify if API…

Hackers hit AI coding tool OpenCode, running up charges on users’ AI accounts

OpenCode is an open-source AI coding agent that's become a popular alternative to Claude Code and Cursor. But hackers got into part of its online platform and stole some users’ API keys, and the AI tools it turned to for help kept refusing to look at the malicious code.

OpenCode hack exposes API keys amid AI distillation attacks

The open-source AI coding project OpenCode has notified a small number of users that API keys they used with external providers were exposed in a security breach. [...]

OpenCode Breach Could Affect OpenAI, Anthropic and Google

A breach affecting the OpenCode Console may lead to the exposure of API keys for Anthropic, OpenAI and Google Gemini users

OpenCode breach may have exposed API keys for AI services

OpenCode, a platform that integrates models from various AI providers, has confirmed a security breach.

OpenCode Security Breach Exposes Third-Party API Keys of its Console Users

OpenCode has disclosed a security breach affecting 1.4% of its Console users, warning that third-party API keys saved in affected workspaces may have been exposed. In an October 17 statement, the company linked the incident to a large-scale distillation attack and said it was working with…

OpenCode reports security breach tied to AI distillation attack

OpenCode Go is the half-priced Claude Code replacement that I can't stop recommending to techy friends

It's not better, but a lot of people probably don't need the huge models either.

“A major overhaul”: OpenCode 2.0 puts its terminal, desktop, and web apps on one shared service

OpenCode AI Coding Agent Flaw Lets Malicious Websites Execute Code on Developer Machines

A critical attack path in OpenCode, an open-source AI coding agent, could let a malicious website execute commands on a developer’s computer. Tracked as GHSA-632h-h47v-g4x4, the remote code execution vulnerability combines content-type confusion in OpenCode’s /global/upgrade API with unsafe…

Infostealers Target Claude, Cursor, Codex and Other AI Agents to Steal Credentials and Sensitive Data

Information-stealing malware is expanding its collection logic to target locally stored data from AI coding agents, including Claude, Cursor, Codex, Cline, Continue, and OpenCode. The shift puts developer credentials, Model Context Protocol configurations, prompt histories, project metadata…

Kimsuky Hackers Use OpenCode AI Agent to Mass-Produce Phishing Decoys in LNK Attacks

Kimsuky has been observed using an AI agent to produce convincing phishing decoys at scale, then hiding malware inside Windows shortcut files. The latest activity shows how ordinary-looking documents can become the first step in compromise. The campaign begins with spear-phishing messages…

Kimsuky Uses OpenCode AI Agent and GitHub PATs in Operation GitPower Attacks

North Korea-linked threat actor Kimsuky has expanded its Operation GitPower activity with malicious LNK shortcuts, GitHub Personal Access Token (PAT)-authenticated payload delivery, and AI-generated decoy documents linked to the OpenCode coding agent. Genians Security Center analyzed 13…

Everything we know about Z.ai, the Chinese company behind the mysterious Ox Alpha model

Z.ai revealed that mystery AI model Ox Alpha was GLM-5.3-Flash, which it had anonymously tested on OpenRouter and OpenCode.

Stealth Frontier Level AI Model Ox Alpha Appears on OpenRouter and OpenCode Free of Charge

Ox Alpha has emerged as a new frontier level AI…

Nobody knows who built AI coding model Ox Alpha or where the code goes

An anonymous provider has been handing out free access to a frontier-class coding model on OpenRouter Inc. since Aug. 20, and no company has admitted to building it. The model is listed as “Ox Alpha” and costs nothing for input or output tokens. OpenCode, an open-source terminal…

Hazmat: Open-source containment for AI agents

Hazmat is an open-source tool that runs AI coding agents inside a separate account on your own machine. It wraps the harnesses people use: Claude Code, Codex, OpenCode, Cursor Agent, and several more, plus any script you write yourself. An agent launched the ordinary way runs as you, which…

Most people pay $20 for Claude Code, but OpenCode Go is $10 and I can barely spend a dollar of it

Claude Code is a good deal, but OpenCode Go is an even better one.

Best practices for AI in open-source work

Free and open source software developers us AI coding assistants such as Claude Code, Copilot CLI, Antigravity, and OpenCode in their daily work. The Software Freedom Conservancy responded to that trend with a set of recommendations for contributors who use these tools, which it groups under…

Zed 1.7.2 has landed with updated OpenCode models, bug fixes and other improvements

Zed, the fast-rising contender to Microsoft's VS Code, has received its version 1.7.2 update, bringing additional OpenCode models such as…

OpenCode Hits 8M Users, a Year from a Toronto Meetup

About a year ago, Jay V stood in front of 30 developers at a DevTools Toronto meetup and showed them a terminal-based coding agent. No launch party. No Product Hunt campaign. Just a GitHub repo and a curl command.

I got a Crush on this new Terminal-based AI coding tool

OpenCode got the glow-up treatment

My favorite AI coding tool isn't OpenCode: it's something way better (and cooler)

Contrary to what you might think from its name, it has nothing to do with a Raspberry Pi SBC

Building OpenCode with Dax Raad

Dax Raad, co-founder of OpenCode, joins the show to discuss their explosive growth, the limits of AI coding tools, and why engineering judgment still matters.

I use OpenCode over Claude Code, and it's every bit as good

Inside the Code Fight Over AI Shell Permissions: How a Single Pull Request Exposed the Tension Between Speed and Safety

A GitHub pull request to the open-source AI coding tool OpenCode has ignited a sharp debate about how AI agents should handle shell command permissions — exposing the fundamental…