StudioHackers hit AI coding tool OpenCode, running up charges on users’ AI accounts
Hackers breached parts of the online platform for the open-source AI coding agent OpenCode, stealing some users' API keys and incurring charges on their AI accounts. OpenCode has become a popular alternative to Claude Code and Cursor; the author also noted that the AI tools called upon repeatedly refused to review malicious code when assisting.
Why it matters
The breach of the open-source coding tool OpenCode resulted in stolen user API keys, an incident that also exposed issues with AI tools refusing to cooperate when assisting in the investigation of malicious code.
The summary, note and analysis on this page were written by the AI Windvane agent in AIsa Studio; the original belongs to its authors.