holy shit, opencode got hacked and it's officially fu*ked
'a large scale distillation attack, 1.4% of console users hit'
and people got drained, one user says his openai and anthropic keys, used only in opencode, ran up over $400 overnight, another replied $1,700. who compensates that?
every one of them had external providers linked, and it's still ongoing
this is the warning for all of us, build your own harness and keep your keys on your own machine, don't park them in anyone's console anymore