API Key Leak at AI Coding Tool 'OpenCode' Leads to Unauthorized Charges: What Happened and 5 Settings to Protect Your Balance Today

October, the online service for the open-source AI coding tool 'OpenCode' was attacked, resulting in the leak of OpenAI, Anthropic, and Google API keys stored by users. There have been reports of ...
YAHOO!

Critical OpenCode RCE Was Patched as a ‘Refactor.’ No CVE Exists, So Nothing Flags It.

A critical remote code execution flaw in OpenCode has been patched. The standard defender toolchain cannot see that. Anomaly, the developer of the open-source AI coding agent that Pillar Security’s ...
GitHub

Ralph Loop for OpenCode

A standalone plugin that reproduces the Ralph Wiggum technique in OpenCode: the same task runs again in a fresh Session after each turn until the assistant emits a completion marker or the iteration ...