{"data":{"id":2547,"lang":"en","title":"Hackers Breach OpenCode Console, Running Up Charges on Developers' AI Accounts","summary":"About 1.4% of OpenCode Console users had API keys abused, with some charges topping $1,000; the company calls the breach ongoing.","category":"technology","category_label":"Technology","published_at":"2026-10-20T06:01:04Z","updated_at":"2026-10-20T06:01:04Z","url":"https://techtools.cz/tools/news/article/2547-hackers-breach-opencode-console-running-up-charges-on-developers-ai-accounts","api_url":"https://techtools.cz/news-api/v1/articles/2547?lang=en","markdown_url":"https://techtools.cz/news-api/v1/articles/2547.md?lang=en","image_url":"https://techcrunch.com/wp-content/uploads/2026/10/cyberatttack.jpg?w=612","word_count":181,"reading_time_minutes":1,"sources":[{"url":"https://techcrunch.com/2026/10/19/hackers-hit-ai-coding-tool-opencode-running-up-charges-on-users-ai-accounts","domain":"techcrunch.com"}],"translation":{"lang":"cs","id":2621,"title":"Hackeři prolomili OpenCode Console a navyšují vývojářům účty za AI","url":"https://techtools.cz/tools/news/clanek/2621-hackeri-prolomili-opencode-console-a-navysuji-vyvojarum-ucty-za-ai","api_url":"https://techtools.cz/news-api/v1/articles/2621?lang=cs"},"content":"Attackers broke into an older system behind OpenCode Console, the platform where some users of the open source AI coding agent store API keys. About 1.4% of Console users were affected, and developers reported unauthorized charges from hundreds of dollars to more than $1,000. Co-founder Dax Raad said the open source app and command-line tool were not affected.\n\nThe breach happened the night OpenCode made GLM-5.3-Flash free for users, and the company disclosed it on Saturday. Anthropic and Google blocked the exposed keys, while OpenAI worked with OpenCode to restore access and refund API customers. OpenCode called the incident ongoing, urged users to revoke and replace their keys, and has not said how attackers got in. It described the attack as a \"large-scale distillation attack\", a link skeptics say is unproven.\n\nRaad said attackers had probed nonstop for 48 hours, and the AI models his team used for analysis refused to work once the malicious code tripped their safety filters. It follows a similar incident at Hugging Face in July and a recent CERT-In warning about unauthorized AI agent access."}}