Hackers Exploit OpenCode Breach to Drain AI Provider Accounts with Stolen API Keys

OpenCode, a widely used AI coding tool, suffered a security breach on October 17, 2026 that exposed stored API keys for OpenAI, Anthropic, and other major AI providers, enabling attackers to run unauthorized queries against high-end models and drain user accounts by hundreds of dollars.