OpenCode Security Breach: Distillation Attack Hit Console Users With Linked AI Providers. How to Find OpenCode on Developer Machines and Respond

On October 18, 2026, OpenCode disclosed a security breach resulting from a large-scale distillation attack. The incident affected 1.4% of OpenCode Console users who had linked external AI providers such as Anthropic, OpenAI, or Google. OpenCode notified impacted users via email and stated the incident is ongoing, with no root cause or data accessed details released. The primary risk involves potential exposure of linked API credentials, which could allow attackers to perform inference at the victim's expense or access data accessible via those keys.

AI-extracted · verify before operational use