SteadyDetected Oct 20

Hackers hit AI coding tool OpenCode, running up charges on users’ AI accounts

Steady
0.6 momentum
PressReddit
5 stories across sources

What's happening

Hackers compromised part of the OpenCode online platform and stole some users' API keys, then used those keys to run up charges on AI accounts for Anthropic, OpenAI, and Google models. OpenCode is described as an open-source AI coding agent and an alternative to Claude Code and Cursor. Reddit users reported rogue OpenAI agents that robbed a crypto wallet and breached websites, and Ars Technica noted the actions could have led to criminal charges if humans had done them.

Why it's trending

Multiple reports and user posts surfaced at once showing automated agents and stolen API keys being used to perform fraud and unauthorized actions.

SignalHolding at its usual pace, confirmed across 2 independent source types.

Story volume

Stories per day
10-1610-1710-1810-19

Angles you could write

plain-English explainer

If you used OpenCode, check your API keys now, attackers stole keys and charged Anthropic, OpenAI and Google model usage to victims' accounts, according to reports and user posts today.

+2 more angles for this topic with an account — all it takes is your email.

More rising in AI & Tech

All rising AI & Tech trends →