Hackers target OpenCode, compromising user accounts

OpenCode, an open-source AI coding agent that has become a popular alternative to tools like Claude Code and Cursor, has fallen victim to a cyberattack. Hackers managed to breach part of its online platform, resulting in the theft of API keys from some users. This incident raises concerns about the security of AI tools used by developers and businesses.

## Why it matters The security of AI tools is crucial, especially as more users rely on them for development projects. This attack not only compromises user information but may also lead to unauthorized charges on their accounts, potentially undermining trust in the use of these platforms.

## What we know It has been confirmed that API keys from some users were stolen during the attack, allowing hackers to perform unauthorized actions on the affected accounts. OpenCode is working to address the situation and mitigate the damages caused by this incident.

## What is still unclear It remains unclear how the attack was executed and what security measures OpenCode had in place at the time of the incident. Additionally, the number of affected accounts and the full extent of the damage have not yet been confirmed.