小墨同学
@xiaomovps
🧠 AI Agent 实操玩家｜Pi / Claude Code / ESP32
📘 Pi 蓝皮书作者
🔧 新工具实测 · 硬件 DIY · 订阅省钱
合作 wx：lucky_bobe
加入 September 2022
429 正在关注 14.8K 粉丝
OpenCode 被攻击了，绑过外部 key 的赶紧自查🔥
几个容易被忽略的细节：
1. 出事的是 OpenCode Console 不是本地版 本地配的 key 不经过他们
2. 只影响在 Console 绑了外部模型的 1.4% 用户 没收到官方邮件就没事
3. Anthropic 已吊销一批可能泄露的 Claude key 有人被盗刷了 3000 美元 官方说退款在走
4. 官方定性为大规模蒸馏攻击 事件还没结束
建议马上做：
1、去各家控制台吊销旧 key 重新生成
2、翻一下用量和账单 设好消费上限和预算告警
3、一个工具一个 key 少往第三方云端绑
显示更多
We had a security breach last night related to a large scale distillation attack that impacted 1.4% of OpenCode Console users
We have notified them all this morning via email. If you did not get an email you were not impacted, it was a subset of users who had external providers linked
The incident is ongoing so we cannot share more details at this point but we are working with Anthropic, OpenAI, and Google to remediate
显示更多
