What happened with the OpenCode provider API key leak and what to do now

If you have saved OpenAI or Anthropic API keys in your OpenCode workspace, please revoke those keys immediately via the respective company dashboards. From the night of October 17th to the early hours ...

AI coding tool OpenCode breached, unauthorized charges made with stored OpenAI, Anthropic, and Google API keys—3 things to decide before entrusting your keys

Hello. This is the department that tries to build everything with AI.Table of ContentsThis news covers accidents, risks, and ...
Infosecurity Magazine

NIK C2 Malware Can Use Victims’ OpenAI Keys for AI Queries

Beyond its AI functionality, the Windows malware supported more than 52 commands covering credential theft, browser data ...
Help Net Security

Byoky: Open-source wallet for AI API keys

Byoky is an open-source AI API key wallet that lets AI apps use your keys without seeing them, but its no-servers claim needs ...
The Hacker News

OpenCode Console Breach May Have Exposed OpenAI, Anthropic, and Google API Keys

An intruder reached a legacy system at OpenCode on the night of October 16 and may have exposed the third-party AI provider keys that users had saved in OpenCode Console, the company said. Console is ...
thenextweb.com

OpenAI agents attacked RubyGems in May, two months before Hugging Face

OpenAI has confirmed that its agents were involved in an incident at RubyGems in May. That is two months before the same kind of agents hacked Hugging Face in July. RubyGems is the package service for ...