Anomaly Innovations, the company behind open-source AI coding agent OpenCode, disclosed a security breach on October 17, 2026. Attackers accessed a legacy system tied to the Console product and stole third-party API keys belonging to some users. Approximately 1.4% of OpenCode Console users were affected, with unauthorized charges ranging from hundreds to over $1,000. The involved providers responded quickly: Anthropic and Google revoked the compromised keys, while OpenAI refunded credits used fraudulently. However, the response was hampered by AI guardrails that refused to analyze the attack code, a problem previously encountered during the Hugging Face breach in July 2026.
Source: Read the original article
Disclaimer: this content is for information purposes only and is not financial advice. Cryptocurrencies are highly volatile: you may lose all of your capital. Always do your own research. Legal notice
