Plan
active
OpenCode breach exposes user API keys for external AI providers
- Engineer — Plan: If your team uses OpenCode, audit which external-provider API keys were configured through it and rotate any that may have been exposed; scope is described as small, but key rotation is low-cost insurance.
- SOC/IR — Learn: No IOCs or TTPs published; breach affects a niche open-source tool with limited enterprise footprint and no detection surface described in the report.
- Leader — Skip
This entry was curated and judged by AI (Claude) with automated enrichment
(CISA KEV / EPSS / public PoC). Verify against the original source before
acting. Found a bad verdict?
Report it —
confirmed errors go to the corrections log.