OpenCode hit by large-scale distillation attack as user credentials leak

OpenCode Hacked: User credentials leaked

▲ 783pranshuchittora144 HN discussion

OpenCode, the open-source coding agent, disclosed a security breach tied to a large-scale distillation attack that affected 1.4% of OpenCode Console users. The company emailed everyone impacted on the morning of October 17, 2026. The incident is still ongoing, so details remain limited, but OpenCode says it is working with Anthropic, OpenAI, and Google to remediate.

We had a security breach last night related to a large scale distillation attack that impacted 1.4% of OpenCode Console users.
Read original →HN discussionRSS

HN discussion

144
  1. redsymbol

    To clarify something that the OpenCode team has done a bad job of clarifying:

    The leak was for something called 'OpenCode Console', which is distinct and separate from the OpenCode coding agent. If you're just using the coding agent, you're not affected. 'OpenCode Console' is a service that is similar to OpenRouter, but is much less widely used.

    The name 'OpenCode Console' is super confusing, because one might think it means the CLI coding agent. It does not. 'OpenCode Console' has nothing to do with the CLI/TUI coding agent, nor the desktop app version.

    The situation is made worse by the fact that 'OpenCode Console' barely has any documentation online, and the official leak announcement does not make the distinction clear at all. The OpenCode team did a terrible job of communicating this, and that's on them.

    Today is a bad day for people using 'OpenCode Console'. But most people, probably the vast majority of OpenCode users who are reading this, are not using 'OpenCode Console'.

  2. pranshuchittora

    I am the author of this post. Looks like OpenCode fans / team is not happy with this post coming on the first page of HN. It has already been flagged by many.

    I never ask for upvotes, but would be great if you can upvote it.

    Thanks!

  3. Ciantic

    I think every API key system should have endpoint "invalidate_api_key" this way whitehat hackers or the party who stored them could invalidate all keys in the case they leak. Now it is race against the time, and everybody got email, and everyone must act themselves.

  4. computerex

    Why are my API keys in the workspace exposed? Does OpenCode send my API keys to their backend servers??? Was this a supply chain attack that infected the opencode program itself? What is going on?

  5. djchen

    Is my understanding correct that this only affected some OpenCode Zen users who stored their (BYOK) API keys from Anthropic/Google/OpenAI?

    In essence they used OpenCode Zen similar to OpenRouter, where you can BYOK or use theirs and be charged token rates.

  6. jchw

    I don't use OpenCode but I would like to know who this impacts. Surely people who are just using OpenCode locally with their own credentials wouldn't be impacted, right? This sounds like something where you have a hosted service and you put your keys into that. Not saying this isn't bad, but it isn't clear and they're not sharing any information.

  7. rozenmd

    @dang this title needs updating: "OpenCode Console hacked: User credentials leaked"

    The opencode CLI has no impact.

  8. oldfuture

    https://news.ycombinator.com/item?id=50108261

    that's why virustotal was flagging it then

More from this day

2026-10-17