Hackers Breach OpenCode, Steal Users’ OpenAI, Anthropic and Google API Keys
Original headline: Hackers hit AI coding tool OpenCode, running up charges on users’ AI accounts
OpenCode, an open‑source AI coding assistant, was compromised when attackers accessed part of its online platform and exfiltrated API keys belonging to users of OpenAI, Anthropic and Google. The stolen keys were then used to generate unauthorized requests, inflating charges on the victims’ AI accounts.
The breach shows how API‑key theft can enable costly abuse of AI services, highlighting the need for stronger key protection.
Research angleHow does the management of API keys in AI coding platforms affect users’ security awareness? — Protection Motivation Theory
2 related reports
- OpenCode Console Breach May Have Exposed OpenAI, Anthropic, and Google API Keys — The Hacker News
- OpenCode Breach Could Affect OpenAI, Anthropic and Google — Infosecurity Magazine
Turn this security issue into a research project
HJITM works with researchers from study design through surveys, analysis and submission to international journals in generative AI and technology management. Bring us your research question.
This item is an AI-generated summary of reporting by TechCrunch. Please check the original article for accuracy. Copyright in the original article belongs to TechCrunch.