OpenCode Reports a Breach: If You Linked AI Accounts, Check Your Keys
The open-source coding agent OpenCode says an attack hit 1.4 percent of Console users who had linked outside AI providers. Details are still sparse, so here is a calm checklist.
OpenCode, a popular open-source AI coding assistant, said on October 18 that it suffered a security breach linked to what it called “a large scale distillation attack”. It affected 1.4 percent of OpenCode Console users, specifically those who had linked external AI providers. OpenCode says it emailed all affected users that morning and is working with Anthropic, OpenAI and Google. If you got no email, OpenCode says you were not impacted.
Two terms deserve a plain translation. OpenCode is a tool developers use to let AI models read and change their code. The Console is its account area, where people can link accounts from other AI companies. A distillation attack, in general, means collecting lots of one model’s answers to reproduce some of its abilities in another model. That is the general meaning; OpenCode’s short statement did not explain how it applies here.
What we do not know is the important part. StepSecurity, a security firm that wrote about it, says it has seen no details on what data was accessed or whether provider API keys (the passwords that let software use your AI accounts) were exposed. OpenCode has not published a root cause, and the incident is described as ongoing. StepSecurity sells related tools, so its advice is partly promotional, but its basic checklist is sensible.
What’s behind it: coding agents are handed powerful keys: access to your code and to paid AI accounts. That makes the services around them attractive targets. At the same time, AI labs have become worried about people extracting their models’ behaviour at scale, which is why “distillation” now appears in security reports.
What this means for you: if you never used the OpenCode Console, there is nothing to do. If you did, do the cautious thing even without an email. First, check your inbox for a message from OpenCode. Second, see which providers you linked (the local file is reportedly at ~/.local/share/opencode/auth.json on macOS and Linux). Third, rotate, meaning replace, any linked Anthropic, OpenAI or Google API keys. Fourth, look at each provider’s usage page for requests you did not make. It takes about ten minutes and is a good habit with any tool that holds your keys.
Sources
AI Agents Start Spending Money: Stripe Sees a Jump, and Grok Promises Refunds
Stripe's Link says agent-driven purchases grew sharply in September, while Elon Musk reportedly promised to reimburse users if Grok mishandles a purchase. Both show where agent shopping is heading.
