OpenCode breach exposes API keys; AI distillation attacks on rise

OpenCode, an open-source AI coding tool, disclosed a security breach that exposed API keys of a small number of users, likely via a compromised dependency or supply-chain attack. The incident coincides with a broader trend of AI distillation attacks targeting developer tools. The full scope and method of the breach remain unclear, but the exposure of API keys could lead to unauthorized access and financial losses for affected users.