Hackers hit OpenCode AI coding tool, running up charges on users' AI accounts

Oct 19, 2026 · Issue 12 · 3 sources, 3 articles

Hackers attacked the AI coding tool OpenCode and ran up charges on users' AI accounts (Oct. 19). According to reports, the compromised agent exposed linked API keys.

Who is affected and how

senior developer

Give agents only narrowly scoped API keys with spending limits.

startup founder

Set spending caps on AI provider accounts, because a stolen key can quickly cause unexpected costs.

Sources

• Hackers hit AI coding tool OpenCode, running up charges on users’ AI accountstechcrunch · Oct 19, 2026
• Hackers hit AI coding tool OpenCode, running up charges on users’ AI accounts - TechCrunchtechcrunch.com · Oct 19, 2026
• The AI Coding Agent Breach That Turned Developer Keys Into Someone Else’s Billsecure.com · Oct 19, 2026

Machine-generated summary based on the titles and excerpts of the source articles. The facts come from the linked article.