Hackers hit AI coding tool OpenCode, running up charges on users’ AI accounts

AI Summary

Hackers compromised part of OpenCode's online platform and stole API keys belonging to some users, potentially exposing them to unauthorized charges on linked AI accounts. The incident targets an open-source AI coding agent, and the AI tools it used reportedly refused to inspect malicious code involved in the attack.

OpenCode is an open-source AI coding agent that's become a popular alternative to Claude Code and Cursor. But hackers got into part of its online platform and stole some users’ API keys, and the AI tools it turned to for help kept refusing to look at the malicious code.