OpenCode breach exposes API keys as AI guardrails stall the defenders

Anomaly Innovations, the company behind the open-source AI coding agent OpenCode, disclosed a security breach on October 17, 2026. Attackers got into a legacy system tied to its Console product and walked out with third-party API keys belonging to some of its users. The more unusual part came during the cleanup. The AI models defenders wanted to use to dissect the attack code reportedly declined to help. What happened inside OpenCode’s Console According to the research findings, roughly 1.4% of OpenCode Console users had their API keys exposed. Those keys connected to outside AI providers, notably OpenAI, Anthropic, and Google. That is what the attackers did. They used the stolen keys for large-scale activity, including model distillation, and the charges landed on legitimate users. Model distillation is the practice of feeding a powerful model huge volumes of prompts and using its answers to train a cheaper copycat. Reported unauthorized charges ranged from hundreds of dollars to more than $1,000 for some users. Affected users received email notifications. The breached system was in the middle of being decommissioned, so it was on its way out when attackers found a way in. The pro...