OpenCode Hacked: User credentials leaked

	OpenCode Hacked: User credentials leaked(twitter.com)
	942 points by pranshuchittora 8 days ago \| 174 comments
	tl;dr: OpenCode disclosed a security breach affecting 1.4% of OpenCode Console users, which they attribute to a large-scale "distillation attack." Affected users have been notified via email, and the company is coordinating with Anthropic, OpenAI, and Google on remediation. The incident is ongoing and further details have not been released.
	HN Discussion: ↓Article conflates OpenCode CLI with OpenCode Console, misleading readers about scope of impact •Confusion about whether local OpenCode users with their own API keys are affected •API key systems should include self-invalidation endpoints to mitigate such leaks ↑Speculation that this breach explains reports of drained OpenAI accounts ↑Author claims OpenCode supporters are flagging the post to suppress it